REST API Security

Content

Hi,

We're discussing using the REST API on external websites to create incidents on our interface. The security and information management teams are worried about the security aspect i.e. could someone essentially hack the data or exfiltrate anything.

Now, the forms will just be pushing data to OSvC - the user won't be able to track an incident - it's just pushing data

Anything I can go back to them with about the security e.g. virus scanning

Thanks,

JJ