Note

Who is responsible for website security?

Website visitor security is important and I believe the responsibility falls on a couple roles which may or may not be the same person, company or separate people or companies.

A large amount of the responsibility for website security lands on the website programmers both front-end and back-end. There are a number of various attack vectors that hackers and other malicious parties can attempt on a website and it is up to the programmers to understand common errors and to enable robust programming tactics in order to avoid valuable customer information to fall into the wrong hands.

Responsibility also falls on the web server manager. This could be the programmer or a separate person in the same company or even a separate company if web hosting is outsourced. The security of the website itself doesn’t matter if the server that is making the website available to the rest of the web is insecure. For this reason, it’s important for programmers that don’t understand the dynamics of web hosting management should outsource that task rather than trying to handle it themselves.