Securing my website is important because it protects data, maintains user trust, and prevents security incidents that could lead to site degradation or outages. Without strong defenses, attackers can exploit vulnerabilities to introduce malware, take control of the site, exfiltrate data, and put me and my visitors at risk. Cyberattacks against public-facing websites are common and may result in unauthorized modification, loss of availability, data compromise, or web hijacking (Cybersecurity and Infrastructure Security Agency, 2021).
Three practical ways to strengthen security include enforcing HTTPS encryption, implementing regular software patching, and strong password policies. HTTPS keeps information private even if traffic is intercepted, while timely software patching closes security flaws before they are exploited, and strong password rules reduce the risk of unauthorized access.
I envision two primary user roles for my website, administrator and subscriber, drawn from the available options of administrator, editor, author, contributor, and subscriber. As the sole Administrator, I manage the site, including editing posts, adjusting settings, and handling all technical and content tasks. Subscribers may leave comments and manage their own profiles but have no ability to create, edit, or publish posts and have no administrative rights.
Reference
Cybersecurity and Infrastructure Security Agency. (2021, February 1). Website Security. https://www.cisa.gov/news-events/news/website-security