Skip to main content

Persona landing

For Security Architects and Accreditors

You evaluate Mattermost for use in regulated, classified, or DISC (Defense, Intelligence, Security, Critical Infrastructure) environments. You write SSPs, POA&Ms, and authorization memos. You need citable specifics: CMVP certificates, NIST control mappings, attestation status, audit log schemas. This page is a curated entry point — every link goes to the canonical guide.

Start here

Encryption, access control, audit logging, and compliance.

Cryptography & FIPS

FIPS 140-3 / STIG-hardened container image builds.

Zero Trust architecture

Control mapping against the CISA Zero Trust Maturity Model.

Common tasks

CMMC compliance

CMMC 2.0 Level 2 requirement coverage.

Secure Mattermost

Hardening features and where to configure them.

Transport encryption

TLS profile, cipher suites, PFS.

Encryption at rest

DB + file-storage encryption.

Schema, retention, SIEM integration.

Compliance export

Export evidence for regulated workloads.

Other personas

For compliance officers

Audit evidence, regulatory mapping.

For air-gapped operators

Network-isolated enclave deployment.

For administrators

Day-to-day workspace administration.