Update on the SL Cert process.
The EC and SL Cert are in the process of finalizing a proposal for Vulnerability and Penetration Testing (VAPT). The Nominations system will be the first system to undergo this testing.
LSF passed on system links, user role information and test cases on Friday 6 March via email to the EC, w/ SL Cert copied.
SL Cert mentioned they will produce findings within 10 days of receipt of the URL. The proposal must be finalized with the EC first.
LSF requested a copy of the findings of the VAPT. As per the SL Cert proposal, the EC needs to obtain prior consent to disclose the findings/report to LSF which they say will not be unreasonably withheld by SL Cert. LSF requested that prior consent be obtained early on, at the proposal stage.