2.6 KiB
2.6 KiB
- #TracyPatman 1:1 #call #morpheus #security
- what she does
- arch threat analysis - leads
- data and services centric assessment
- answer the Q - what would ahppen if you lost it
- Complex = 2x 1.5hr meetings
- previously often triggered via security marketable
- sec code review
- pentests
- these 3 are required for every service
- can't even get to their codebase
- Morpheus not really in those processes yet
- you upload content to the wiki then the review is scheduled
- Feedback from tracy
- As we discussed, we have not been able to make any headway getting traction for doing reviews of Morpheus and any help there would be greatly appreciated, as we do have concerns about risk. For reference, the GreenLake Developer portal is below:
- HPE GreenLake Developer Standards Home Page | HPE GreenLake platform
- Policy requiring ATA: HPE GreenLake Development Policy for Secure Architecture Design | HPE GreenLake Platform
- Secure Architecture Design: Secure Architecture Design | HPE GreenLake Cloud Platform
- Secure Coding Policy: HPE GreenLake Development Standard for Secure Coding Overview | HPE GreenLake Cloud Platform
- Secure Coding Guide: HPE GreenLake Development Standard for Secure Coding | HPE GreenLake Cloud Platform
- Template for ATA: Architecture Page Template - GreenLake Cloud Services - Confluence
- ATA Requirements: Architecture Page Requirements - GreenLake Cloud Services - Confluence
- Review Details: Architecture Page Review - GreenLake Cloud Services - Confluence
- arch threat analysis - leads
- what she does
- DONE Service Desc completed:: 04-30-2025
