stanford-rc / globus.stanford.edu

globus.stanford.edu — The Globus @ Stanford web site
https://globus.stanford.edu/
Other
3 stars 4 forks source link

MinSec Check: Applications & SaaS/PaaS: Inventory #21

Open akkornel opened 6 years ago

akkornel commented 6 years ago

In MinSec for Applications, the Inventory item has the following:

Maintain a list of applications and the associated risk classifications and data volume estimates. Review and update records quarterly.

Also, in MinSec for PaaS/SaaS, the Inventory and Asset Classification item has the following

1. List the product in the department's MinSec Inventory. 2. Ensure the inventory is updated quarterly and reflects accurate data classification and service ownership.

I guess this goes into ITS' spreadsheet? @RandalMelen, do you know where this would go?

For data volume estimates, we can go off of the transfer records that we can pull from Globus, once we start pulling that info.