-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RFC: DCP Incident Response Plan #80
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This RFC is not ready for review because it references an external draft google doc for its detailed design.
Embed IRP content into 0000-Incident-Response-Plan.md
1. Date of discovery of the suspected or confirmed incident | ||
1. Brief description of suspected or confirmed incident | ||
1. If known, also include: | ||
1. Date incident occurred |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have seen before where the reporter can classify the ticket initially (event, incident, etc) and then the reviewer can downgrade/change as needed. In this situation, are all defaulting to a certain severity?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've updated to specifically called this out within today's updates
Updates based on TJ's comments: (1) request affected system and application versions + estimated incident severity rating during incident ticket creation and (2) allow IRT the opportunity to revise the incident severity rating after incident review
Approved during 7/25 PM meeting |
* Create 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md Embed IRP content into 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md Updates based on TJ's comments: (1) request affected system and application versions + estimated incident severity rating during incident ticket creation and (2) allow IRT the opportunity to revise the incident severity rating after incident review * Update 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md
* Create 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md Embed IRP content into 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md Updates based on TJ's comments: (1) request affected system and application versions + estimated incident severity rating during incident ticket creation and (2) allow IRT the opportunity to revise the incident severity rating after incident review * Update 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md * Update 0000-Incident-Response-Plan.md
The DCP needs to have a confirmed plan and procedures in place so that we are prepared to respond to an incident. This RFC proposes an Incident Response Plan for review.
June 14: Last call for community reviewJune 21: Last call for community review (extended 1 week)July 12: Last call for Oversight reviewReview closed; pending final approval.