Security Assessment Remediation (SAR)
Space shortcuts
Page tree
Skip to end of metadata
Go to start of metadata


Date

 

Time10.00 am
Duration60 mts
Location

Zoom

Zoom
Attendees

Ashish Pandit Unknown User (mkgill)  Achraf Adenane Nathalie Gholmieh 

Project/ProgramSecurity Assessment remediation - SAR 
Project BoardITS PMO 
Log Time
OTL
Objective(s)
  • Implement SAR Remediations. There are following items for the agenda

    • Review feedback on decision log

    • - SAR-12 - Data Flow and dataflow classification
      -      SAR-21- Mitigaterisk - Developers can connect directly to the iPaaS system without utilizing a jump box.

        • SAR-85 Splunking the access logs


        -        SAR-18-Design processes to ensure that production data doesn't flow in non-prod environments
        - SAR 29 - Review third-party remote access to ensure access is still required
        -         SAR-15 Setup Periodic reviews of user account groups and roles

    • Review Standard OTL for security remediation

      https://collab.ucsd.edu/display/SAR/SaR+OTL

Notes: 


Speaker DescriptionNotes
SAR Review the remediations that are ready for Security review

Next Steps
  • These remediations status will be updated as "Complete" by Achraf Adenane 
  • Unknown User (mkgill) to add the status "Out Of Scope" to list :
    • Not Started
    • Analysis - In Progress
    • Analysis - Reviewed
    • Solution - In Process
    • Solution - Reviewed
    • Out of Scope
Write a comment...