Final Draft of STRA (Security Threat Risk Assessment)

[steveburtch]

The BTR project must submit a STRA and have it approved by IPS.

~Pierre Campeau is the Senior Security Analyst assigned to our project.~ Richard Edwards is a senior security officer with OCIO enterprise services and has been assigned to this project.

Link to the STRA Document: https://docs.google.com/document/d/1oXdCuy2qimAq-YG8yIGnas-resjQPTx2/edit?usp=drive_link&ouid=100179527247507750986&rtpof=true&sd=true

See first draft #19184

[steveburtch]

@Apt766525 Here is correspondence between Thor and Pierre that lays out the different sections of work that are needed to complete the STRA:https://drive.google.com/file/d/10ZQjDCdpFoulGutCRMUzB31dKrm_je23/view?usp=sharing

[mstanton1]

A final version of the STRA has been put through Service Now for approval. This has been approved at the Product Owner level and is now awaiting approval from the MCIO.

@Apt766525 can you make sure the STRA link above is to the current version (sent by email) which has gone for approvals?

[mstanton1]

Still pending approval from Jillian Carruthers. Link to STRA in Service Now: https://sbcsnprod.service-now.com/nav_to.do?uri=%2Fsysapproval_approver.do%3Fsys_id%3D554dee9d1b838250197b0f22dd4bcb2a%26sysparm_record_target%3Dsysapproval_approver%26sysparm_record_row%3D1%26sysparm_record_rows%3D1%26sysparm_record_list%3Ddocument_id%253D9979637b47aa1110fd269128436d4374%255Esource_table%253Dx_mscb4_stra_app_stra_table%255EORDERBYDESCsys_created_on

[mstanton1]

STRA has been approved/completed and received all sign off's.

STRA has been stored on the BC Registries LAN: R:\2 LEADERSHIP\Admin 100-499\Security Management 470\06 Security assessments (STRAs)