New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create on-call runbook/playbook #23

Closed

pshiu opened this issue Mar 8, 2023 · 8 comments

Assignees

pshiu commented Mar 8, 2023

We need a runbook so it's clear to working group members how to respond to security disclosures.

Some open questions from: https://openedx.atlassian.net/wiki/spaces/COMM/pages/3624140816/Security+Working+Group+Private:

How will we keep track of who is on-call?
Is there a need for the community to know who is on-call?
What are the expectations for on-call? Will there really be CAT-1s?
How will we know who is the maintainer of what repository?

pshiu added this to Security Working Group

pshiu converted this from a draft issue

pshiu self-assigned this

pshiu moved this from Todo to In Progress in Security Working Group

Author

pshiu commented May 16, 2023

Started to address "What are the expectations for on-call?" in new section On-Call Duties section on our "For working group members" Confluence page.

Author

pshiu commented May 25, 2023 •

edited

Loading

Added runbook on finding a maintainer in our Security Playbooks.

Author

pshiu commented Jun 5, 2023

Started draft sections:

Added to Triage [email protected] emails.

Author

pshiu commented Aug 23, 2023

Added section Forward a report to an operator or Axim.

Author

pshiu commented Oct 4, 2023 •

edited

Loading

Next steps:

@pshiu & @alangsto meet to compare current 2U practices
Meet with @feanil to brainstorm future improvements
Draft runbooks for review

Author

pshiu commented Nov 15, 2023

@alangsto & I met and compiled the current 2U practices. We now need to compare them.

Author

pshiu commented Nov 28, 2023

@alangsto & I met and added details to Security Playbooks – for Security WG members.

Author

pshiu commented Dec 4, 2023

@feanil & I met and we worked on Common Issues.

alangsto moved this from In Progress to Done in Security Working Group

feanil closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment