We should go over whatever documents are appropriate for Tomcat and make sure we've checked all the right boxes related to securing the system. This is of particular importance now that the site is "live" on the Internet. We might also do the same for Jenkins since it is also live on the Internet.