Confirmed users
502
edits
Security/InfoSec: Difference between revisions
→Service: Rapid Risk Assessment (RRA): fixed link
Jstevensen (talk | contribs) |
Gdestuynder (talk | contribs) (→Service: Rapid Risk Assessment (RRA): fixed link) |
||
| Line 125: | Line 125: | ||
: 30 minutes meeting with OpSec. | : 30 minutes meeting with OpSec. | ||
; Service request | ; Service request | ||
: [[https://bugzilla.mozilla.org/enter_bug.cgi?bug_file_loc=http%3A%2F%2F&bug_ignored=0&bug_severity=normal&bug_status=NEW&cf_blocking_b2g=---&cf_fx_iteration=---&cf_fx_points=---&component=Security | : [[https://bugzilla.mozilla.org/enter_bug.cgi?bug_file_loc=http%3A%2F%2F&bug_ignored=0&bug_severity=normal&bug_status=NEW&cf_blocking_b2g=---&cf_fx_iteration=---&cf_fx_points=---&component=Operations Security (OpSec)%3A Review&contenttypemethod=autodetect&contenttypeselection=text%2Fplain&defined_groups=1&flag_type-4=X&flag_type-607=X&flag_type-800=X&flag_type-803=X&form_name=enter_bug&maketemplate=Remember%20values%20as%20bookmarkable%20template&op_sys=Linux&priority=--&product=mozilla.org&rep_platform=x86_64&short_desc=RRA%20request%20for%20%3Cteam%20name%3E&target_milestone=---&version=other|request RRA]] | ||
=== Description === | === Description === | ||
The Rapid Risk Assessment (also called Rapid Risk Analysis) is a 30 minutes or less discussion about the potential risks of a project. The RRA | The Rapid Risk (Impact) Assessment (also called Rapid Risk Analysis) is a 30 minutes or less discussion about the potential risks of a project. The RRA is high level and lightweight. | ||
=== What you can do with this service === | === What you can do with this service === | ||
* Quickly identify risks related to your project, service, tool, etc. | * Quickly identify risks impacts related to your project, service, tool, etc. | ||
* Make decision making more efficient: spend more time where it matters on your project, service, tool (where the risks are). | * Make decision making more efficient: spend more time where it matters on your project, service, tool (where the risks are). | ||
* Get your service recorded in a risk heatmap to compare it with other services. | * Get your service recorded in a risk heatmap to compare it with other services. | ||