From 40f1e14f59ce54bf6c2122812995ab07498a0013 Mon Sep 17 00:00:00 2001 From: Erica Westendorf Date: Wed, 6 Jan 2021 22:53:01 +0000 Subject: [PATCH 1/2] Initial commit of the system security plan for Launchboard --- LB_FE_system_security_plan.md | 82 +++++++++++++++++++++++++++++++++++ 1 file changed, 82 insertions(+) create mode 100644 LB_FE_system_security_plan.md diff --git a/LB_FE_system_security_plan.md b/LB_FE_system_security_plan.md new file mode 100644 index 0000000..195e43a --- /dev/null +++ b/LB_FE_system_security_plan.md @@ -0,0 +1,82 @@ +# Full name of the system. +system-name: Launchboard Front End + +# Shortname or abbreviation. +short-name: Launchboard + +# System version or release number. +version: 1.0 + +# Operational Environments: production, test, research and development, tactical, deployed, or other. +environment: Operational environment, partybus, IL2 Mission App production cluster + +# Authorization Status: Pre-CTF +Status: development + +# Assessment Date. Identify the date of last assessment per Continuous ATO (cATO). +Review-date: TBD + +# Security Re-Assess Interval. Period for re-assessment after updates +Assess-interval: As needed. + +# Authorization boundary diagram. Include URL. +System-architecture: https://confluence.il2.dso.mil/display/P1/Launchboard + +# Confidentiality, Integrity, Availability M,M,M +# Classification: UNCLASSIFIED +# Personally Identifiable Information: None +Categorization: + Confidentiality: M + + Integrity: M + + Availability: M + + Classification-Level: UNCLASSIFIED IL2 + + PII: None + +Data-types: + - text, image files, document/pdf, + + +Deployment-sites: + - https://launchboard.apps.dso.mil + +Programming-Languages: + - javascript + +Dependencies: + - AWS, IL2 partybus staging, and mission application production cluster. For rendering of status, all apis for systems in P1/ + +Databases: + - MySQL, read of JSON data/files + +External-Systems: + - None + +Role-Identification: + Authorizing-Official: + name: Daniel Holtzman + title: Authorizing Official + org: Air Force Command & Control + email: daniel.holtzman.1@us.af.mil + phone: 781-225-1118 + System-Owner: + name: Andrew Green + title: PArty Bus Anchor Engineer + org: Platform One + email:andrew.greene@omitron.com + phone: 719-246-3433 + Chief-Information-Security-Officer: + name: Matt Huston + title: CISO + org: AFLCMC/HNCP + email: matthew.huston@afwerx.af.mil + phone: 650-933-4121 + Product-Manager: + name: Erica Westendorf + title: Project Manager + org: Platform1 + email: westendorf_erica@bah.com + phone: 571-405-8544 \ No newline at end of file -- GitLab From 55175bfe037b470025add32340d99a9562e590a8 Mon Sep 17 00:00:00 2001 From: Erica Westendorf Date: Wed, 6 Jan 2021 22:58:04 +0000 Subject: [PATCH 2/2] Update LB_FE_system_security_plan.md --- LB_FE_system_security_plan.md | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/LB_FE_system_security_plan.md b/LB_FE_system_security_plan.md index 195e43a..76de7ac 100644 --- a/LB_FE_system_security_plan.md +++ b/LB_FE_system_security_plan.md @@ -22,23 +22,22 @@ Assess-interval: As needed. # Authorization boundary diagram. Include URL. System-architecture: https://confluence.il2.dso.mil/display/P1/Launchboard -# Confidentiality, Integrity, Availability M,M,M +# Confidentiality, Integrity, Availability M,M,M # Classification: UNCLASSIFIED # Personally Identifiable Information: None Categorization: Confidentiality: M Integrity: M - + Availability: M Classification-Level: UNCLASSIFIED IL2 - + PII: None Data-types: - - text, image files, document/pdf, - + - text, image files, document/pdf, Deployment-sites: - https://launchboard.apps.dso.mil @@ -48,25 +47,25 @@ Programming-Languages: Dependencies: - AWS, IL2 partybus staging, and mission application production cluster. For rendering of status, all apis for systems in P1/ - + Databases: - MySQL, read of JSON data/files External-Systems: - None -Role-Identification: +# Role-Identification: Authorizing-Official: name: Daniel Holtzman title: Authorizing Official - org: Air Force Command & Control + org: Air Force Command & Control email: daniel.holtzman.1@us.af.mil phone: 781-225-1118 System-Owner: name: Andrew Green title: PArty Bus Anchor Engineer org: Platform One - email:andrew.greene@omitron.com + email:andrew.greene@omitron.com phone: 719-246-3433 Chief-Information-Security-Officer: name: Matt Huston @@ -79,4 +78,4 @@ Role-Identification: title: Project Manager org: Platform1 email: westendorf_erica@bah.com - phone: 571-405-8544 \ No newline at end of file + phone: 571-405-8544 -- GitLab