Versions Compared

Version Old Version 25 New Version 26
Changes made by

Roxy Sanchez

Roxy Sanchez

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleAre all logs stored on a secure/hardened server that is logically separate from the systems being logged?

Are all logs stored on a secure/hardened server that is logically separate from the systems being logged?

Not necessarily "servers" but for example, AWS holds logs on activities separate to the actual platform, GitHub also retains logs. We also port log information out to separate platforms such as papertrail or internal databases.

More information: https://commonplace.atlassian.net/l/cp/2juZouPF

Expand
titleDoes your organisation have a testing process to test business critical applications before they are deployed, to ensure there is no adverse impact on operations or security?

Does your organisation have a testing process to test business critical applications before they are deployed, to ensure there is no adverse impact on operations or security?

Snyk is run with each deployment, automated end-to-end, integration and unit testing on each deployment, manual code review and QA on each deployment.

...