Compliance Activites chapter additions

[Mike Lange]

Compliance Activities chapter additions and changes:

verify/adjust link for ISO
Try to expand Risk Assessment
Should be able to expand Backup and disaster recovery section
Add specific details about necessary Security Training (SOC, ISO, HIPAA)
Add language to Data Classification that may resonate better with the reader base.
Try to expand the Exception Process section

[Bryan D. Payne (bdpayne)]

I understand that this is a placeholder for now, but please add some additional details about the improvements that we need to make here so that it is clear what the scope of this particular bug is. This will also help us better triage the bug.

[Mike Lange (mike-lange)]

General review and additions

verify/adjust link for ISO
Try to expand Risk Assessment
Should be able to expand Backup and disaster recovery section
Add specific details about necessary Security Training (SOC, ISO, HIPAA)
Add language to Data Classification that may resonate better with the reader base.
Try to expand the Exception Process section

[N Dillon (sicarie)]

I would really like to see the following additions as well and how they tie in. I think that this could be an initial outline in the compliance chapter that is built out into project-specific items:

Auditing
   - CADF
   - openscap
   - stachtach
   - Congress

[N Dillon (sicarie)]

To clarify/finish that thought, those project-specific items could then be put in their own section in that project's chapter of the security guide.

[Lana (loquacity)]

Hi Mike, any progress on this?

[Mike (mike-lange-e)]

Hi Lana, mostly the same with this one. When I get the submission for the other bug, this one is next.

Thanks!

-Mike

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>] On Behalf Of Lana
Sent: Sunday, June 12, 2016 9:23 PM
To: <email address hidden>
Subject: [Bug 1341827] Re: Compliance Activites chapter additions

Hi Mike, any progress on this?

--
You received this bug notification because you are subscribed to the bug report.
https://bugs.launchpad.net/bugs/1341827

Title:
  Compliance Activites chapter additions

Status in openstack-manuals:
  Confirmed

Bug description:
  Compliance Activities chapter additions and changes:

  verify/adjust link for ISO
  Try to expand Risk Assessment
  Should be able to expand Backup and disaster recovery section
  Add specific details about necessary Security Training (SOC, ISO, HIPAA)
  Add language to Data Classification that may resonate better with the reader base.
  Try to expand the Exception Process section

To manage notifications about this bug go to:
https://bugs.launchpad.net/openstack-manuals/+bug/1341827/+subscriptions

[Lana (loquacity)]

OK, Mike. I await your patch! :)

[Lana (loquacity)]

Hi Mike, any update?