Author
Avani Nagwann
Co-Founder
Avani co-founded NoDrama and is co-founder of Pangolin Marketing, its parent company. She has spent over twenty years in marketing, including multiple stints as CMO for technology brands, and now runs the company behind the product: technology decisions, roadmap, hiring, and go-to-market. She writes about service design, why maintenance keeps getting deprioritised inside businesses, and what a website actually costs to own.
Written by Avani
Sample tax preparer data security plan: the website entry to add to Publication 5708
IRS Publication 5708's sample written information security plan lists workstations, the network and client portals, and has no section for the firm's…
PCI DSS 6.4.3: does it apply if you use Stripe?
Your WooCommerce store takes cards through Stripe, and Stripe supplies the card fields. PCI DSS 6.4.3 covers scripts on the payment page,…
SRA Digital Badge: Is Yours Still Showing Today’s Date?
An authorised body must display its SRA number and the SRA digital badge on its website, and the badge became mandatory on…
Cyber Essentials Renewal: What Changes Each Year
A supplier on a central government contract renews Cyber Essentials certification every 12 months. The requirements and the question set can change…
5 Control Points of Cyber Essentials: What Each of the Five Asks
A UK supplier holds Cyber Essentials because a central government contract asked for it and renews it every year. The scheme's five…
Core Web Vitals for WordPress: LCP, INP and CLS
Core Web Vitals are three separate measurements, loading, interactivity and visual stability, and a WordPress site can fail any one of them…
How Do You Check If Your Website Is Secure?
There is no single test that confirms a website is secure. A green padlock, a clean blacklist result and a passing Google…
WordPress Update Management: Core, Theme and Plugin Updates Done Safely
WordPress core, themes and plugins each update on their own schedule, and WordPress ships a built-in auto-update toggle for all three. Core…
Cyber Essentials Security Update Management: Does the 14-Day Rule Cover Your WordPress Site
Cyber Essentials requires every in-scope device to run software that is kept up to date, and it names commercial off-the-shelf applications and…
Cyber Essentials Malware Protection for Your Website
Cyber Essentials asks every applicant to name their in-scope devices and show a malware protection mechanism on each one. The requirements document…
WordPress Support Contract Template
A WordPress support contract only works if it names the same things a dispute would ask about later. This is a fill-in…
WordPress Security Hardening: What It Is and What It Actually Covers
You have a security plugin installed, updates mostly happen, and the site has never been hacked. That is a reasonable place to…
Security Questionnaire Answer Sheet for WordPress Sites
A vendor security questionnaire, whatever it calls itself, sitting somewhere between a cybersecurity assessment questionnaire and a plain form your biggest customer…
What Are the Security Risks of WordPress?
"WordPress is insecure" gets said a lot, and it is not quite the right claim. Nearly every disclosed WordPress vulnerability lives in…
The WordPress Maintenance Checklist
This is the checklist for what a WordPress site actually needs on a recurring basis: core, plugin and theme updates tested before…