07/27/2022 SAR Security Review

RA-128 – we will create a ticket. Let’s discuss the scope on Wednesday and who should it be assigned to

• Install Sparion agent on all iPaaS servers - Ashish Pandit 26 Aug 2022 
• Setup a separate meeting to discuss firewall for inbound and outbound. include Daniel Q 
• Review the need for an outbound firewall with Daniel 27 Jul 2022 Achraf Adenane 

RA-130 – It seems that it was tagged as outside the scope for iPaaS. This needs to be done at ITS level - confirmed to be out of scope

•  Review with Mike and confirm that it is out of scope - 27 Jul 2022 Achraf Adenane 

RA-131 – This is “in progress”. SMT may accept this risk. Please see the document link (column M). We can discuss this on Wednesday.

• Might be accepted by SMT. See meeting notes - https://collab.ucsd.edu/pages/viewpage.action?pageId=174046189

• Bring in Mike to HANA access discussion 27 Jul 2022 Achraf Adenane  
• Setup a meeting with Mike, Judy, Kevin, OIA, and DIS

https://collab.ucsd.edu/display/IPAAS/HANA+Get_AH+access+How-To

RA-16 – Analysis ready for review

• Create tasks to remediate prod-non prod environment Ashish Pandit 29 Jul 2022 

RA-19 – Analysis ready for review

Out of scope

RA-25 – Closed (Already implemented)

Achraf Adenane to review and prioritize only risks that are scoped to iPaas (column I). If it needs to be done at ITS level, we need to track those separately in a different project.

• Provide a prioritized list of remediation that can be worked on 26 Jul 2022 Achraf Adenane