CITZ Digital Office - GitHub Review Secondary Review and Completion Process

[bspeersbcgov]

Describe the issue The previous ticket was for a review of the provision and on-boarding support of GitHub services. This ticket is for the completion of and process steps for finalizing that review.

Additional context GitHub maintains code, allows for collaborative development, records and links profiles, and allows for easy updating of software and databases.

In order to ensure privacy best practices are followed for each tool an additional secondary review process will be required to walk through this tool.

This steps focus on all the secondary review processes for the above completed review.

How does this benefit the users of our platform? Users of our platform can make use of this assessment to help build program and use-case specific assessments. This assessment is also necessary for legal review of the GitHub TOS.

Definition of done Completed review from CPO and Legal, including updates and any required sign-off.

Deliverables

• [x] Submit assessment for CPO review
• [x] Discuss review with legal services when asked
• [x] Contract review with CPO
• [ ] Final submission and closing from program area
• [ ] Sign-off and closing processes, including Personal Information Directory (PID) updates

[bspeersbcgov]

Awaiting feedback from program, re: legal assessment