Updates (12 Oct - 16 Oct 2020)
Progress / Completed
- Redefined InfoSec Services
- Initial discussion on new InfoSec Services (GRC, OffSec, ProdSec, SecOps)
- Old InfoSec Services
- Traveloka EISA
- EISA - PAT
- OffSec OSC Maturity Assessment (cont)
- Container Security - SecOps, ProdSec
- Docs drafting (cont)
- Discussed Sqitch Image Security Test result.
- VM - Vulnerability Tracking & Risk Deviation / Acceptance Tracking (ongoing):
Plan / Work in progress
- EISA
- EISA - PAT
- Organization Service Catalog Assessment (SecOps, ProdSec)
- EISA - IPT
- Prioritization Feedback
- Maturity Assessment
- Container Security - SecOps, ProdSec
- researching best practices, tools and processes
- drafting container security docs
- Vulnerability Management Program Improvement:
- Going on the next plan to include SecOps in the VMP
- ProdSec
- Create ProdSec - Pre-Production VMP dashboard
- Waiting new ProdSec Jira Security Issue Tracker.
- Vulnerability Tracking (ongoing):
- Identify vulnerability level, risk rating, and provide recommendation;
- Coordinating with users / product owners for the identified vulnerability;
- Follow up correction and corrective action for the identified vulnerability;
- Risk Deviation / Acceptance Tracking (ongoing):
- Coordinating with users / product owners for the risk deviation / acceptance
Roadblocks / Problems
-
Misc
-