Membership Site With Secure Access Using WordPress

Nationwide Group Staff Union
Nationwide Group Staff Union

We appointed OWA in May 2018 and they have successfully, and without interruption, moved our website to their hosting servers; they have also carried out a programme of security testing to ensure we are fully compliant with GDPR. OWA provide us with regular and exceptional communications with their technical team, working closely with Lawrence, their business manager. 

The OWA team has taken time to really understand our challenges. This way of working has given us confidence in the OWA team and a new insight into what is technically achievable and how new online innovations could improve our membership services … always explained by Lawrence in a way we understand! Their help desk system is also easy to use and ensures we are kept up to date on the progress of all work which, to date, has all been delivered on time.

Tim Rose, assistant general secretary (services), Nationwide Group Staff Union

NGSU Wordpress website security testing code review homepage

The brief

Oxford Web Applications was appointed in 2018 to host and manage the existing WordPress website run by the Nationwide Group Staff Union (NGSU). 

Security is particularly important as the NGSU website is used by Nationwide Building Society employees. 

Our initial task was to undertake an application security test using Open Web Application Security Project (OWASP) standards and carry out a comprehensive code review. 

NGSU Wordpress website security testing code review article page

What we did

We began the project with a site migration over to our UK-based secure data centre before carrying out a full security audit and website code review. This was to ensure the platform and website were stable, secure and suitable to develop on in the future. 

Following completion of the security testing and code review, we met with NGSU and presented a detailed report of our findings. Based on these, we made a number of recommendations for improvements to the website, including security hardening, which we have since implemented. 

We also support the NGSU website using our helpdesk platform to review and fix any technical issues raised by NGSU administrators. 

About Nationwide Group Staff Union

About Nationwide Group Staff Union

The Nationwide Group Staff Union (NGSU) is an independent trade union representing some 12,500 members. It is the sole trade union recognised by the Nationwide Building Society Group for collective bargaining and is a Trades Union Congress affiliate.

The NGSU was formed in 1990 following the amalgamation of the Anglia Building Society Staff Association and the Nationwide Building Society Staff Association. More recently, the Portman Group Staff Association, the Staff Union for Dunfermline Building Society and One Union Regional Brands have all transferred engagements to NGSU.

The structure of the union is democratic and its work focuses on protecting and promoting the interests of its members according to policies agreed at national conference.

Our History with Nationwide Group Staff Union

Our History with Nationwide Group Staff Union

Oxford Web Applications was appointed to work with the Nationwide Group Staff Union in May 2018 and has successfully relocated, evaluated, upgraded and maintained its website since then. 

We provide NGSU with access to our helpdesk system and work closely with the project team on ideas and website innovations to constantly improve the services NGSU provides to its members.