Official documentation includes a number of measures that can be taken in order to improve default security provided by the platform:
https://docs.alfresco.com/content-services/latest/admin/securing-install/

In this blog post, 5 simple stepts related to that information are covered.

Hyland conducted an initial review of Alfresco internally developed products and determined there is no impact by the CVE-2021-44228 related to Apache Log4j.

Hyland's security team is aware of the CVE-2021-44228 related to Apache Log4j, and they are actively investigating whether any of Hyland's products or internal systems are vulnerable. The security of our products and systems are a top priority, and we appreciate your patience as we determine whether Hyland or its products are impacted. You can expect more updates to be shared here as we learn more.

https://docs.alfresco.com/content-services/latest/develop/oop-ext-points/events/