Identify security gaps in GCNotify

[jimleroyer]

Description

Gaps between our security posture, our documentation of our security posture and new needs/requirements are recognized and closed (Identify security gaps between CDS and ESDC IT security guidance and best practices)

As a SRE of GCNotify,
I need to identify security gaps in our suite,
So that I can take proactive actions to address these.

WHY are we building?

Improve security posture of GCNotify.

WHAT are we building?

Only document the security gaps within GCNotify. This task is to not address these. This task can be done by running a security profile against our suite.

VALUE created by our solution

Improved security and readiness.

Acceptance Criteria

• Agreed upon security profile to run by the team.
• Documented gaps to address.

QA Steps

• Produced documentation is reviewed by the team.
• Documented is hosted in a protected B environment.