[SL Cert] VAPT Proposal

12 views
Skip to first unread message

sherazad hamit

unread,
Mar 11, 2020, 6:25:28 AM3/11/20
to LSF-Elections
Update on the SL Cert process. 

The EC and SL Cert are in the process of finalizing a proposal for Vulnerability and Penetration Testing (VAPT). The Nominations system will be the first system to undergo this testing. 
LSF passed on system links, user role information and test cases on Friday 6 March via email to the EC, w/ SL Cert copied. 

SL Cert mentioned they will produce findings within 10 days of receipt of the URL. The proposal must be finalized with the EC first. 

LSF requested a copy of the findings of the VAPT. As per the SL Cert proposal, the EC needs to obtain prior consent to disclose the findings/report to LSF which they say will not be unreasonably withheld by SL Cert. LSF requested that prior consent be obtained early on, at the proposal stage. 







Sanjiva Weerawarana

unread,
Mar 11, 2020, 12:50:50 PM3/11/20
to sherazad hamit, Bandula Ranathunga, Ranjan Nishantha, LSF-Elections
Bandula/Ranjan how do we get this done so we don't have any drama like last time?

--
You received this message because you are subscribed to the Google Groups "LSF-Elections" group.
To unsubscribe from this group and stop receiving emails from it, send an email to lsf-election...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/lsf-elections/9872a081-89b5-47ed-b22e-6ceb9933d92e%40googlegroups.com.


--
Sanjiva Weerawarana
Reply all
Reply to author
Forward
0 new messages