Confirmed users
180
edits
Security/RiskRatings: Difference between revisions
Jump to navigation
Jump to search
→What Scores Mean
m (→Calculating Risk Ratings: fix tag closing order) |
|||
| Line 65: | Line 65: | ||
|Review Type || Group (Scheduled on SecReview Calendar) || Group (Scheduled on SecReview Calendar) || Individual Reviewer || Individual Reviewer | |Review Type || Group (Scheduled on SecReview Calendar) || Group (Scheduled on SecReview Calendar) || Individual Reviewer || Individual Reviewer | ||
|- | |- | ||
|Required | |Artefacts Required | ||
| | |||
{| border="1" | {| border="1" | ||
|Architecture Diagram | |Architecture Diagram | ||
| Line 74: | Line 75: | ||
|- | |- | ||
|Threat Model | |Threat Model | ||
|- | |||
|Testing Plan Required | |||
|} | |} | ||
| | | | ||
{| border="1" | {| border="1" | ||
| | |Architecture Diagram | ||
|- | |- | ||
| | |Application Diagram, | ||
|- | |- | ||
| | |Data Flow Enumeration, | ||
|- | |- | ||
| | |Threat Model | ||
|- | |||
|Testing Plan Required | |||
|} | |} | ||
| | | | ||
{| border="1" | {| border="1" | ||
| | |Architecture Diagram attached to bug | ||
|- | |- | ||
| | |Testing Plan Required | ||
|} | |||
| | |||
{| border="1" | |||
|Architecture Diagram attached to bug if more than one system is involved. | |||
|- | |- | ||
| | |Testing Plan Required | ||
|} | |} | ||
|- | |- | ||
| How Documented || SecReview Wiki || SecReview Wiki || SecReview Wiki -or- in Secreview bug (with indidication of no-wiki) || In SecReview Bug | | How Documented || SecReview Wiki || SecReview Wiki || SecReview Wiki -or- in Secreview bug (with indidication of no-wiki) || In SecReview Bug | ||