07/20/2022 SAR Security Review

Date	20 Jul 2022
Time	10.00 am
Duration	60 mts
Location	Zoom
Zoom
Attendees	Ashish Pandit Unknown User (mkgill) Achraf Adenan
Project/Program	Security Assessment remediation - SAR
Project Board	ITS PMO
Log Time
OTL
Objective(s)	Implement SAR Remediations. There are following items for the agenda Review feedback on decisions Review RA-128; RA-130; RA-131

Notes:

Speaker	Description	Notes
SAR	Review the remediations that are ready for Security review	RA-128 – we will create a ticket. Let’s discuss the scope on Wednesday and who should it be assigned to Review the need for an outbound firewall with Daniel 27 Jul 2022 Achraf Adenane RA-130 – It seems that it was tagged as outside the scope for iPaaS. This needs to be done at ITS level Review with Mike and confirm that it is out of scope - 27 Jul 2022 Achraf Adenane RA-131 – This is “in progress”. SMT may accept this risk. Please see the document link (column M). We can discuss this on Wednesday. Might be accepted by SMT. See meeting notes - https://collab.ucsd.edu/pages/viewpage.action?pageId=174046189 Bring in Mike to HANA access discussion 27 Jul 2022 Achraf Adenane https://collab.ucsd.edu/display/IPAAS/HANA+Get_AH+access+How-To RA-16 – Analysis ready for review RA-19 – Analysis ready for review RA-25 – Closed (Already implemented) Achraf Adenane to review and prioritize only risks that are scoped to iPaas (column I). If it needs to be done at ITS level, we need to track those separately in a different project.
	New Remediations	Provide a prioritized list of remediation that can be worked on 26 Jul 2022 Achraf Adenane