Submit representative.va.gov Subdomain ESECC Request

[emily-gullo]

Description

This request must be followed to allow our subdomain to hit a load balancer's CNAME in VA Enterprise Cloud and finalize the subdomain and environmental subdomain requests. The process is elaborated in the linked markdown, and specific ARP documentation is available here.

Acceptance Criteria

Ensure the below required steps are completed and submit the request:

• [x] Subdomain registered
• [ ] Screenshot of the most recent WASA Scan Result (Potentially optional if sharing ATO)
• [ ] (Optional) A screenshot of the AWS TIC POAM if you don't have the WASA. A Web Application Scanning Assessment (WASA) can take 30-45 days to get, and a Plan of Action and Milestones (POAM) can be gathered from the eMASS portal, the same portal used to do the ATO documentation, as a quick waiver for a missing WASA. The project's Information System Security Officer (ISSO) who knows the process can get a POAM in 15 minutes.
• [x] A Privacy Impact Assessment (PIA) or a Privacy Threshold Analysis which generally accompanies the ATO process.
• [ ] Our project's Authority to Operate (ATO) Document.
• [ ] Submit via a DSVA employee only.

[gia-lexa]

platform-security team confirmed the necessary documentation (WASA, PIA, and ATO) is being sent to me.

[gia-lexa]

The PIA and ATO have been sent to me via email. Our Platform Security team confirmed the WASA Scan Screenshot has a 30-day turnaround time, so it's expected to arrive by the end of June.

[hdbaines]

Moving to icebox till we have the WASA Screenshot

[hdbaines]

WASA scan is currently in the queue, awaiting further instructions from Kyle Crockett