hmcts / roadmap-platform-operations

0 stars 0 forks source link

Platform Security Review #2242

Open endakelly opened 1 month ago

endakelly commented 1 month ago

DTSPO-19422

Summary Raising this so there's something in the roadmap.

I have been discussing with Noel and Linda about performing a review of some aspects of the platform for security purposes.

The areas to be covered:

Joiners / leavers process IAM in Azure Access request process Revoking secrets process Pre-commit hooks Software composition analysis Intended Outcome Report that we can use to add roadmap items and prioritise work that needs to be done to address issues raised from the review

Impact on Teams None