I have a Skype call scheduled later today with a friend overseas looking at improving their Moodle setup, and persuading IT to open it up outside the firewall. Long story. It is only available within the firewall for 'security concerns'. No sad comments about IT staff please.
QUESTION: Is there a brief, recent, relevant white paper or something someone can point me to with a quick review of Moodle on the security issue in particular?
A confidence builder as we read https://docs.moodle.org/28/en/Security
I'm not talking at the rocket science level. This is a tiny institution where we are NOT protecting the crown jewels.