Republic of Liberia · Ministry of Labour
Security
Last updated: 8 July 2026
Security is foundational to Liberia Works, not an afterthought. As an initiative of the Ministry of Labour, Republic of Liberia, this platform safeguards the personal data of job seekers, employers, and Ministry staff with layered administrative, technical, and physical controls. This page summarises how we protect your information.
1. Encryption
All traffic between your device and Liberia Works is encrypted in transit using TLS. Personal data is encrypted at rest in our databases and file storage. We enforce strict transport security headers and a Content Security Policy across the platform.
2. Access Controls
The platform operates on a default-deny model: no data is accessible unless an explicit, reviewed rule grants access. Every request is authenticated and authorised against the caller's role, so job seekers, employers, and Ministry staff each see only what their role permits. Access to personal data is scoped and audit-logged.
3. Data Protection
Personal information is classified and handled according to its sensitivity. Job seeker profiles, CVs, and application answers are shared only with the specific employers to whom you explicitly apply. We validate all input at every boundary and apply rate limiting to protect against abuse.
4. Secure Development
Changes to the platform go through required code review and security review before release. Sensitive code paths carry additional review requirements. We scan for leaked secrets and known-vulnerable dependencies as part of our automated pipeline, and secrets are never stored in our source code.
5. Reporting a Vulnerability
We welcome responsible disclosure from the security community. If you believe you have found a security vulnerability in Liberia Works, please report it to us at [email protected] with enough detail to reproduce the issue. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and address it. We are grateful for reports made in good faith and will not pursue action against researchers who act responsibly.
6. Your Role in Security
No system is entirely immune from risk. Help keep your account secure by using a strong, unique password, keeping your verification codes private, and signing out on shared devices. If you notice suspicious activity on your account, contact us immediately.