Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-8662

[CRAN-001] will align efforts with future PSSC 2022-3 Initiative

XMLWordPrintable

    • Icon: Feature Feature
    • Resolution: Unresolved
    • Icon: Blocker Blocker
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      Follow Logging guidance linked in description, obtain verification that logs are properly loaded into Splunk, setup monitoring for events of interest. The latest updated SOA guidance on the Source page for SOA includes SEC-MON-REQ-1 (Logging & Monitoring) as one of the 5 ESS controls PSSC has identified as a significant gap across a large number of pipelines systems and applications. PSSC plans to incorporate these five controls in a set of proposals for PSSC 2022-3 initiatives with the goal of implementing remediation efforts to address these specific security gaps across all pipeline systems and applications. Given the severity and scale associated with this control preventing full SOA Compliance, a Conditional SOA may be requested with a remediation plan for this control stating "[Service] will align efforts with future PSSC 2022-3 Initiative

              Unassigned Unassigned
              rhn-it-hseljene Henning Seljenes
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: