GITBOOK-147: Suseela's Jan 24 changes

README.md

@@ -19,13 +19,13 @@ layout:
 
 # 🏠 Home
 
-[OpenG2P](https://openg2p.org) is an open-source platform that enables governments and humanitarian organizations to deliver critical social benefits directly to those who need them. It facilitates the building of secure, inclusive and efficient registries and digital cash transfer delivery systems.
+[OpenG2P](https://openg2p.org) is an open-source platform that enables governments and humanitarian organisations to deliver critical social benefits directly to those who need them. It facilitates the building of secure, inclusive and efficient registries and digital cash transfer delivery systems.
 
-OpenG2P is a Digital Public Good (DPG) recognized by the[ DPGA](https://digitalpublicgoods.net/) and a significant building block of a country's Digital Public Infrastructure ([DPI](https://docs.cdpi.dev/dpi/readme)). OpenG2P contributes to the G2P transfers DPI layer in a digital economy, while leveraging DPGs in other categories. Its modular and interoperable technology augments existing systems in countries, without discarding what works or starting from scratch.
+OpenG2P is a Digital Public Good (DPG) recognised by the[ DPGA](https://digitalpublicgoods.net/) and a significant building block of a country's Digital Public Infrastructure ([DPI](https://docs.cdpi.dev/dpi/readme)). OpenG2P contributes to the G2P transfers DPI layer in a digital economy, while leveraging DPGs in other categories. Its modular and interoperable technology augments existing systems in countries, without discarding what works or starting from scratch.
 
-OpenG2P offers several modules to digitize processes of the social benefit delivery chain, including both beneficiary-facing and government-facing processes. The platform is modular, interoperable, scalable, and secure. It provides user-friendly interfaces for program managers, frontline workers, and beneficiaries to digitally interact with a country’s social protection programs. It also helps policymakers at higher levels of government get a bird’s eye view on program performance, beneficiary coverage, and public expenditure.
+OpenG2P offers several modules to digitise processes of the social benefit delivery chain, including both beneficiary-facing and government-facing processes. The platform is modular, interoperable, scalable, and secure. It provides user-friendly interfaces for program managers, frontline workers, and beneficiaries to digitally interact with a country’s social protection programs. It also helps policymakers at higher levels of government get a bird’s eye view on program performance, beneficiary coverage, and public expenditure.
 
-<figure><img src="https://github.com/OpenG2P/openg2p-documentation/raw/1.2/.gitbook/assets/social-protection-delivery-chain.png" alt=""><figcaption></figcaption></figure>
+<figure><img src="https://github.com/OpenG2P/openg2p-documentation/raw/1.2/.gitbook/assets/social-protection-delivery-chain.png" alt=""><figcaption><p>End-to-End process of the Social Benefits delivery chain</p></figcaption></figure>
 
 OpenG2P is built on a bedrock of good practices and principles that drive our work towards empowering populations around the world through technology.
 

SUMMARY.md

@@ -8,7 +8,7 @@
 * [Modules](platform/modules/README.md)
   * [Program & Beneficiary Management System](platform/modules/program-and-beneficiary-management-system/README.md)
     * [Program Management](platform/modules/program-and-beneficiary-management-system/program-management.md)
-    * [Beneficiary management](platform/modules/program-and-beneficiary-management-system/beneficiary-management.md)
+    * [Beneficiary Management](platform/modules/program-and-beneficiary-management-system/beneficiary-management.md)
     * [Beneficiary Registry](platform/modules/program-and-beneficiary-management-system/beneficiary-registry.md)
     * [ID Verification](platform/modules/program-and-beneficiary-management-system/id-verification.md)
     * [Eligibility](platform/modules/program-and-beneficiary-management-system/eligibility/README.md)

guides/documentation-guides/documentation-guidelines.md

@@ -47,11 +47,7 @@ Follow the below specification while creating diagrams in Miro
 Diagram specification
 {% endembed %}
 
-## SPAR
-
-{% embed url="https://miro.com/app/board/uXjVNDnhJUg=/" %}
-SPAR
-{% endembed %}
+##
 
 ##
 

platform/architecture.md

@@ -1,3 +1,7 @@
+---
+description: Work in progress
+---
+
 # Architecture
 
 ## Introduction

platform/modules/program-and-beneficiary-management-system/README.md

@@ -15,7 +15,7 @@ The Program and Beneficiary Management System (PBMS) is the core module of OpenG
 
 ## Functionality and features
 
-<table><thead><tr><th width="201">Features</th><th>Functionality</th></tr></thead><tbody><tr><td><a href="./#data-sources">Data sources</a></td><td><ul><li>Pulling data from registries</li></ul></td></tr><tr><td><a href="program-management.md">Program management</a></td><td><ul><li>Program definition</li><li>Program lifecycle management</li><li>Managing multiple programs</li><li>Programs targeting both individuals and groups</li><li>Program disbursement cycles</li></ul></td></tr><tr><td>Beneficiary management</td><td><p></p><ul><li>Identifying beneficiaries</li><li>Enrolling beneficiaries</li><li>Maintaining <a href="beneficiary-registry.md">beneficiary registry</a></li><li>Deciding on entitlements</li><li>Disbursements</li><li>Beneficiary lifecycle -- exits</li><li>Notifications to beneficiaries</li></ul></td></tr><tr><td>Beneficiary registry</td><td><ul><li>Data sharing of beneficiaries via standard interfaces</li></ul></td></tr><tr><td>Self service portal</td><td><ul><li>Program application and discovery by beneficiaries</li><li>Program enrollment and disbursement status </li></ul></td></tr><tr><td>On demand assistance</td><td></td></tr><tr><td>Document Management</td><td></td></tr><tr><td>ID Authentication</td><td><ul><li>Login using national ID via OIDC</li><li>Multiple ID configuration</li></ul></td></tr><tr><td>Deduplication</td><td></td></tr><tr><td>Eligibility</td><td><ul><li>Automatic computation of eligibility</li><li>Proxy Means Test (PMT)</li></ul></td></tr><tr><td>Entitlement </td><td></td></tr><tr><td>Disbursement</td><td><ul><li>Disbursement cycles and batches</li><li>Digital cash transfer via bank or mobile</li><li>Voucher based disbursement</li><li>In-kind disbursement</li><li>Generation of disbursement list</li><li>Fund management</li></ul></td></tr><tr><td>Voucher</td><td><ul><li>Digital vouchers for goods or services</li><li>Voucher verification app</li><li>Voucher reimbursement </li></ul></td></tr><tr><td>Accounting</td><td><ul><li>Fund management Reconciliation</li></ul></td></tr><tr><td>Administration</td><td><ul><li>Role-based access control (RBAC)</li><li>Multilevel approval </li><li>Fund management</li><li>Multi lingual - internationalisation (i18n)</li></ul></td></tr><tr><td>Notifications</td><td><ul><li>Notifications to beneficiaries via SMS/Email</li></ul></td></tr><tr><td>Interoperability</td><td><ul><li>Compliance with G2P Connect Registry APIs</li><li>Compliance with G2P Connect Disbursement APIs</li></ul></td></tr><tr><td><a href="multi-tenancy-in-pbms.md">Multi-tenancy</a></td><td><ul><li>Multiple departments using the same instance of OpenG2P</li><li>Separation of data, control and access.</li></ul></td></tr><tr><td><a href="broken-reference">Monitoring and Reporting</a> </td><td><ul><li>Monitor the status of the program and registries</li><li>User creates dashboard of their choice to visualize data</li></ul></td></tr></tbody></table>
+<table><thead><tr><th width="201">Features</th><th>Functionality</th></tr></thead><tbody><tr><td><a href="./#data-sources">Data sources</a></td><td><ul><li>Pulling data from registries</li></ul></td></tr><tr><td><a href="program-management.md">Program management</a></td><td><ul><li>Program definition</li><li>Program lifecycle management</li><li>Managing multiple programs</li><li>Programs targeting both individuals and groups</li><li>Program disbursement cycles</li></ul></td></tr><tr><td><a href="beneficiary-management.md">Beneficiary Management</a></td><td><p></p><ul><li>Identifying beneficiaries</li><li>Enrolling beneficiaries</li><li>Maintaining <a href="beneficiary-registry.md">Beneficiary Registry</a></li><li>Deciding on entitlements</li><li>Disbursements</li><li>Beneficiary lifecycle -- exits</li><li>Notifications to beneficiaries</li></ul></td></tr><tr><td><a href="beneficiary-registry.md">Beneficiary Registry</a></td><td><ul><li>Data sharing of beneficiaries via standard interfaces</li></ul></td></tr><tr><td><a href="self-service-portal.md">Self service portal</a></td><td><ul><li>Program application and discovery by beneficiaries</li><li>Program enrollment and disbursement status </li></ul></td></tr><tr><td>On demand assistance</td><td></td></tr><tr><td><a href="document-management.md">Document Management</a></td><td></td></tr><tr><td><a href="id-verification.md">ID Verification</a></td><td><ul><li>Login using national ID via OIDC</li><li>Multiple ID configuration</li></ul></td></tr><tr><td><a href="deduplication.md">Deduplication</a></td><td></td></tr><tr><td><a href="eligibility/">Eligibility</a></td><td><ul><li>Automatic computation of eligibility</li><li>Proxy Means Test (PMT)</li></ul></td></tr><tr><td><a href="entitlement.md">Entitlement </a></td><td></td></tr><tr><td><a href="disbursement-cycles/">Disbursement</a></td><td><ul><li>Disbursement cycles and batches</li><li>Digital cash transfer via bank or mobile</li><li>Voucher based disbursement</li><li>In-kind disbursement</li><li>Generation of disbursement list</li><li>Fund management</li></ul></td></tr><tr><td><a href="disbursement-cycles/voucher.md">Voucher</a></td><td><ul><li>Digital vouchers for goods or services</li><li>Voucher verification app</li><li>Voucher reimbursement </li></ul></td></tr><tr><td><a href="accounting.md">Accounting</a></td><td><ul><li>Fund management Reconciliation</li></ul></td></tr><tr><td><a href="administration/">Administration</a></td><td><ul><li>Role-based access control (RBAC)</li><li>Multilevel approval </li><li>Fund management</li><li>Multi lingual - internationalisation (i18n)</li></ul></td></tr><tr><td><a href="notifications.md">Notifications</a></td><td><ul><li>Notifications to beneficiaries via SMS/Email</li></ul></td></tr><tr><td><a href="../../interoperability.md">Interoperability</a></td><td><ul><li>Compliance with G2P Connect Registry APIs</li><li>Compliance with G2P Connect Disbursement APIs</li></ul></td></tr><tr><td><a href="multi-tenancy-in-pbms.md">Multi-tenancy</a></td><td><ul><li>Multiple departments using the same instance of OpenG2P</li><li>Separation of data, control and access.</li></ul></td></tr><tr><td><a href="../../monitoring-and-reporting.md">Monitoring and Reporting </a></td><td><ul><li>Monitor the status of the program and registries</li><li>User creates dashboard of their choice to visualize data</li></ul></td></tr></tbody></table>
 
 ## Architecture
 
@@ -58,4 +58,4 @@ PBMS is highly configurable and several functionality and parameters can be enab
 
 ## Use cases
 
-## Use guides
+## Related user guides

platform/privacy-and-security/README.md

@@ -23,3 +23,30 @@ Encryption of data is achieved with production-grade Key Manager module. Learn m
 ## Secure deployment
 
 OpenG2P offers support for Kubernetes-based production grade deployment with security features like [Wireguard](https://www.wireguard.com/), [Istio](https://istio.io/), access control, traffic control etc. [ Learn more >>](../deployment/)
+
+## FAQ
+
+<details>
+
+<summary>OpenG2P is an open source software.  How secure is it?</summary>
+
+In general, for any product, security is handled at multiple levels.&#x20;
+
+* Product security features
+
+We have privacy and security features embedded in our product and we are constantly striving to add more such features. Please refer to above note.
+
+OpenG2P is built over Oodo ERP which is elected as the best secure open source ERP by OWASP in 2021. This is because of the extensive work by the community on the underlying platform. OWASP is the largest security reporting system in the world.
+
+OpenG2P has adopted all the best practices of Oodo. OpenG2P has also adopted the GitHub security validation and have been regularly scanned by GitHub for dependency security.
+
+* Deployment of secure infrastructure
+
+While deployment infrastructure is a choice of the implementer/System Integrator we offer secure [production-grade deployment reference architecture](https://github.com/mosip/k8s-infra/blob/main/docs/\_images/architecture.png) for implementors. This secure infra comprising of Kubernetes, Wireguard, Istio etc offers high level of data and access security.
+
+* Security policies and processes
+
+OpenG2P team can help review security policies defined by the Governement/System Integrator. \
+
+
+</details>