2019-09-03 Security Subcommittee Meeting Notes

Please see the Minutes of Meetings and recording for the  SECCOM meeting that was held on 3rd of September 2019.

Jira No

Summary

Description

Status

Solution

Jira No

Summary

Description

Status

Solution

SECCOM-247

 SECCOM stated that 1 year expiration is better. Shorter time would force projects to validate automatic renewal is working. Jonathan has updated to 1 year.

Change Default Expiration Time for AAF Certs to 5yrs

 

 

SECCOM-249

We agreed to create Jira tickets for pending actions on projects for Code  of conduct, Crypto Certificate Verification and Crypto Used Network. Krzysztof will provide support in scripting for Jira tickets creation.

CII Badging updates

 

 

SECCOM-256

We reviewed all submitted topics. Owners are kindly requested to add its session (if relevant) here and provide information about session duration and preferred time slot.

Antwerp F2F security topics

 

 

SECCOM-242

Updates for communication matrix were integrated. During ONAP F2F meetings, PTLs will be contacted to provide their feedback - dedicated session is also planned.

Communication matrix

 

 

SECCOM-234

Make our test kubernetes deployment align with CIS guidelines  CIS v1.2 was sent to SECCOM. Updates for requirements were also done to align with CIS.

CIS guidelines