Identify key logging, monitoring, and alerts for API

cds-snc / platform-forms-client

NextJS application that serves the public-facing website for Forms

https://forms-staging.cdssandbox.xyz/

MIT License

28 stars 12 forks source link

Open srtalbot opened 4 days ago

srtalbot commented 4 days ago

Define the approach for leveraging existing logging and new features required by the API.

[ ] Review existing logging to identify if it is impacted by adding the API
[ ] Review the OWASP top 10 API risks to identify logging / monitoring we need to implement
[ ] Review ITSG-33 controls in the AU family
[ ] Write malicious user stories that could impact GC Forms key assets via the API data retrieval path.
[ ] Threat modeling (?)

wmoussa-gc commented 1 day ago