This repository has been archived by the owner on Jul 30, 2019. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 34
/
Copy pathsystem-security-plan.yml
82 lines (77 loc) · 2.33 KB
/
system-security-plan.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
---
name: Micro-purchase
uniqueID: <MB number – see https://docs.google.com/spreadsheets/d/1v4QfXGaJVy9-CZ0n6cFLHGGs_5TL1l8uCh6ZyNYjMDk/edit#gid=2047916505>
version: 2.0
# descriptions:
# https://18f.gsa.gov/dashboard/
phase: live
# `D26 Civilian Operations` is most common for 18F projects.
# http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol1-Rev1.pdf#page=23
information-types:
- D26 Civilian Operations
# https://pages.18f.gov/before-you-ship/ato/levels/
confidentiality: none
integrity: low
availability: low
security-baseline: low
system-type: minor
level-of-identity-assurance: <0 if no authentication, or a link to SSP of the forthcoming identity system>
staff:
authorizing-official:
name: Noah Kunin
title: TTS Infrastructure Director
org: General Services Administration
unit: TTS
email: devops@gsa.gov
system-owner:
name: Noah Kunin
title: TTS Infrastructure Director
org: General Services Administration
unit: TTS
email: devops@gsa.gov
system-management:
name: Noah Kunin
title: TTS Infrastructure Director
org: General Services Administration
unit: TTS
email: devops@gsa.gov
system-security-officer:
name: Noah Kunin
title: TTS Infrastructure Director
org: General Services Administration
unit: TTS
email: devops@gsa.gov
technical-lead:
name: Alan deLevie
title: Technical Lead
org: General Services Administration
unit: 18F
email: alan.delevie@gsa.gov
leveraged-authorizations:
- https://www.fedramp.gov/marketplace/compliant-systems/amazon-web-services-aws-eastwest-us-public-cloud/
purpose: https://github.com/18F/micropurchase/blob/develop/README.md#micro-purchase
components:
- https://github.com/18f/micropurchase
- https://github.com/18f/samwise
- https://github.com/rails/rails
# these will be the same unless your architecture is especially complex
system-diagram: https://github.com/18F/micropurchase/issues/94
network-diagram: https://github.com/18F/micropurchase/issues/94
environments:
- Cloud Foundry
- Amazon Web Services East
user-types:
developer:
functions:
- deployment
- engineering
bidder:
functions:
- bidding
admin:
functions:
- auction creation
- auction acceptance
controls:
- https://hakiri.io/github/18F/micropurchase/master
- https://gemnasium.com/18F/micropurchase