Description:

There has been a suggestion to create ONAP project security requirements.

This needs to be in addition to the CII badging.

It can be based on the VNF security requirements as there will be a lot in common.

SECCOM 2019-01-30

Samuli presented: https://wiki.onap.org/display/DW/ONAP+Generic+Security+Requirements

• Progressing
• In the process to identify the security requirements that overlapp withthe CII badging to avoid that the same requirement is both.
• Looking to create a Jira to review each requirements.
• Samuli indicates the first version is ready for review.
  • Create SECCOM JIRA tickets
  • Seperate page
  • Lable:  ONAPSECURITYREQUIREMENTS

2018-12-19 SECCOM

------------------------

Samuli shared his thoughts:

• VNF security requirements has a number of requiremetns that are applicable to ONAP components.
• These are beyond CII badging (in general, but we need to avoid overlap)
• Samuli to do a first draft for the ONAP Dev Event in Jan.
• Ambition: for dublin to create and share, for feedback and socialization, not for enforcement for Dublin
• Samuli will lead