Uploaded image for project: 'OCP Technical Release Team'
  1. OCP Technical Release Team
  2. TRT-1906

Sippy CMDB Audit

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • None
    • None
    • Sippy CMDB Audit
    • False
    • None
    • False
    • Not Selected
    • To Do
    • 50% To Do, 25% In Progress, 25% Done

       Justin notified us that a CMDB entry is necessary for sippy. Capturing slack message:

      An entry in the CMDB necessitates a series of assessments (unrelated to IBM): ESS, PIA, and SIA.
      ESS - Fairly straight-forward practices for secure software development / deployment.
      PIA - Privacy Impact Assessment. Since we don't store PII and should only be using the SSO, this shouldn't be an issue.
      SIA - Service Impact Assessment. How much a temporary outage will impact RH.
      If an STI affects the product pipeline, it also requires regular attestations to maintain Security Operating Approval (SOA) - I'm hoping we avoid this

       

      https://redhat-internal.slack.com/archives/C02K89U2EV8/p1733513594925739

              rh-ee-fbabcock Forrest Babcock
              rh-ee-fbabcock Forrest Babcock
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: