Website Security & Acceptable Use

Prohibited Activities

• Unauthorised access to accounts, systems, data or administrative areas
• Hacking, penetration attempts or exploitation of vulnerabilities
• Attempted account takeover or credential sharing
• Data scraping or bulk extraction where prohibited
• Uploading malware or malicious files
• Spam, phishing or automated abuse of forms and endpoints
• Manipulating or attempting to manipulate assessments or results
• Impersonating another person, school or organisation
• Any fraudulent or unlawful activity

Account Security

Users must keep credentials confidential, use a strong password, and log out on shared devices. Suspected unauthorised access should be reported to us immediately.

Protective Measures

FCO may monitor for abuse, apply rate limits, block traffic, suspend accounts, cancel affected assessment attempts and restrict access where necessary to protect users, data and systems.

Reporting a Security Issue

Security concerns or suspected vulnerabilities may be reported to support@fcofoundation.org. Please do not publicly disclose a suspected vulnerability before we have had a reasonable opportunity to review it.

Consequences

Breaching this policy may lead to suspension or termination of access, cancellation of registrations or results, and, where appropriate, escalation under applicable laws and regulations.