cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.44k stars 204 forks source link

Monitor Microsoft M365 service changes #431

Open schrolla opened 12 months ago

schrolla commented 12 months ago

💡 Summary

Determine where and how Microsoft disseminates both service and API level changes to M365 services. Collect and find a way to detect announcements of upcoming changes quickly to feed into a change evaluation process.

Motivation and context

ScubaGear is only useful if it accurately assesses M365 services. As cloud services and their feature evolve rapidly and APIs change, ScubaGear will need to be updated to keep pace. Therefore, monitoring upcoming service changes through announcements is important to be able to anticipate and evaluate changes before they happen.

Implementation notes

Developing a monitoring solution for changes includes:

Acceptance criteria

How do we know when this work is done?

schrolla commented 1 month ago

Retain and potentially split into smaller chunks for iterative refinement torwards automated process.