---
title: "Security tasks"
slug: "security-tasks"
abstract: "A list of the security tasks to be completed when enforcing security in Content Hub."
---
# Security tasks

Enforcing [security](urn:resource:component:1283407) in the Sitecore Content Hub involves all aspects of the system and must follow best practice guidelines. Security tasks that you need to complete include.

## Configure a Content Hub instance

- Set up and configure the Sitecore Identity server
- [Assign modules to users and groups](https://doc.sitecore.com/ch/en/users/content-hub/assign-modules-to-users-and-groups.html)
- [Check your licenses](https://doc.sitecore.com/ch/en/users/content-hub/license.html)

## Authenticate Content Hub users

- [Configure user authentication](https://doc.sitecore.com/ch/en/users/content-hub/configure-the-authentication-setting.html).
- [Define password policies](https://doc.sitecore.com/ch/en/users/content-hub/password-policy.html).

> [!note]
> If you use integrated third-party applications, you need to [create an OAuth client](https://doc.sitecore.com/ch/en/users/content-hub/create-an-oauth-client.html).

## Manage users and user groups

- [Create users](urn:resource:component:1282035).
- [Create user groups](https://doc.sitecore.com/ch/en/users/content-hub/manage-user-groups-in-content-hub.html).
- Add users to user groups.
- [Configure user group policies](https://doc.sitecore.com/ch/en/users/content-hub/configure-a-user-group-policy.html).

## Security diagnostics and antivirus

Content Hub includes:

- A [security diagnostics tool](https://doc.sitecore.com/ch/en/users/content-hub/security-diagnostics.html) that helps with verifying the permissions assigned to an entity.
- An [antivirus scan](https://doc.sitecore.com/ch/en/users/content-hub/set-up-the-antivirus-scan.html) functionality for media processing.
- [Cookie usage](https://doc.sitecore.com/ch/en/users/content-hub/cookie-usage.html) to make user interactions secure.

> [!note]
> If you need this antivirus scan functionality, contact your Sitecore account manager.