For Security Architects and Accreditors¶
You evaluate Mattermost for use in regulated, classified, or DISC (Defense, Intelligence, Security, Critical Infrastructure) environments. You write SSPs, POA&Ms, and authorization memos. You need citable specifics: CMVP certificates, NIST control mappings, attestation status, audit log schemas. This page is a curated entry point — every link goes to the canonical guide.
Start here¶
<CardGrid columns={3} cards={[ {title: 'Security Updates', to: '/security-guide/security-updates', description: 'Live advisories with version, severity, and product filters.'}, {title: 'Security Guide', to: '/security-guide/security-guide-index', description: 'Encryption, access control, audit logging, and compliance.'}, {title: 'Cryptography & FIPS', to: '/deployment-guide/server/containers/fips-stig', description: 'FIPS 140-3 / STIG-hardened container image builds.'}, ]} />
Common tasks¶
<CardGrid columns={3} cards={[ {title: 'CMMC compliance', to: '/security-guide/cmmc-compliance', description: 'CMMC 2.0 Level 2 requirement coverage.'}, {title: 'Zero Trust architecture', to: '/security-guide/zero-trust', description: 'Control mapping against the CISA Zero Trust Maturity Model.'}, {title: 'Secure Mattermost', to: '/security-guide/secure-mattermost', description: 'Hardening features and where to configure them.'}, {title: 'Encryption at rest', to: '/deployment-guide/encryption-options', description: 'DB + file-storage encryption.'}, {title: 'Audit logging', to: '/administration-guide/manage/logging', description: 'Schema, retention, SIEM integration.'}, {title: 'Compliance export', to: '/administration-guide/comply/compliance-export', description: 'Export evidence for regulated workloads.'}, ]} />
Other personas¶
<CardGrid columns={3} cards={[ {title: 'For compliance officers', to: '/for/compliance-officer', description: 'Audit evidence, regulatory mapping.'}, {title: 'For air-gapped operators', to: '/for/air-gapped-operator', description: 'Network-isolated enclave deployment.'}, {title: 'For administrators', to: '/for/administrator', description: 'Day-to-day workspace administration.'}, ]} />