The DHIS2 security team will present an update about security practices implemented by the core team, will introduce the new DHIS2 vulnerability management and disclosure policy, and will discuss the roadmap for increased security and privacy support of DHIS2 implementations including software features, best practice guidelines, and automated security tools.