Site Access Controls

CSDEV

Site Access Controls

Covers the ff: PM 1130 Service Access Request Procedure, PM 1130.1 Manual Washing of User Access on Products Work Instruction, PM 1128 Site Access Request Procedure, PM 1132 Application Key Management Procedure, PL 1024 Password Policy

Questions 3 of 20

Timer
0
Score
0

Site Access Controls

If a request for a new application key has been filed via UberTicket and it was verified that the application key does not exist, what is the next step?

The Cloud Engineer must generate the application key required.

The Senior Software Engineer must generate the application key required.

Either the Senior Cloud Engineer or Senior Software Engineer must generate the application key required.

Questions 5 of 20

Timer
0
Score
0

Site Access Controls

Processing UberTicket requests to whitelist / blacklist a site can only be done by whom?

Cloud Engineers.

Cloud Engineers or Software Engineers.

Senior Cloud Engineers.

Software Engineers

Questions 7 of 20

Timer
0
Score
0

Site Access Controls

The UberTicket to file when requesting for admin access to a product.

[PB0962] DevOps Site Listing Request

[PB0961] CSDEVS Request to Grant or Revoke Access

[PB0965] CSDEVS Product/3rd Party Integration Request

Questions 8 of 20

Timer
0
Score
0

Site Access Controls

What are the password requirements for Cloudstaff applications?

B, C & F

A, D & F

A, C & F

B. User cannot reuse last 3 passwords.

D. Minimum character length should be 8 characters.

C. Minimum character length should be 12 characters.

E. Must have at least 1 upper case letter, 1 lower case letter and 1 special character.

F. Must have at least 1 upper case letter, 1 lower case letter, 1 number and 1 special character.

A. User cannot reuse a password.

Questions 11 of 20

Timer
0
Score
0

Site Access Controls

The UberTicket to file when requesting access to services related to the server, database or code repositories.

[PB0962] DevOps Site Listing Request

[PB0965] CSDEVS Product/3rd Party Integration Request

[PB0961] CSDEVS Request to Grant or Revoke Access

Questions 12 of 20

Timer
0
Score
0

Questions 17 of 20

Timer
0
Score
0

Site Access Controls

The UberTicket to file when requesting the whitelisting or blacklisting of a site for a user.

[PB0961] CSDEVS Request to Grant or Revoke Access

[PB0962] DevOps Site Listing Request

[PB0965] CSDEVS Product/3rd Party Integration Request

Questions 18 of 20

Timer
0
Score
0

Site Access Controls

Who is responsible for processing UberTicket requests to gain / revoke access to a restricted site or product?

Directly Responsible Individual (DRI) / Point of Contact (POC)

Cloud Engineer

Business Analyst / Product Owner / Squad Lead

Software Engineer

Questions 19 of 20

Timer
0
Score
0

Site Access Controls

The UberTicket to file when requesting a new application key or the update of an existing one.

[PB0961] CSDEVS Request to Grant or Revoke Access

[PB0965] CSDEVS Product/3rd Party Integration Request

[PB0962] DevOps Site Listing Request

Site Access Controls

You finished!

The target performance for the Service Access Request Procedure is considered to have been met if there are minimal incidents of unauthorized access to applications developed by Cloudstaff.

Any unauthorized access to Cloudstaff sites or third-party sites used by Cloudstaff requires a Corrective Action Request (CAR) to be raised.

If a request for a new application key has been filed via UberTicket and it was verified that the application key does not exist, what is the next step?

Application keys are stored in Passbolt.

Processing UberTicket requests to whitelist / blacklist a site can only be done by whom?

Access to CS Bolt is restricted to Cloudstaff IP addresses only.

The UberTicket to file when requesting for admin access to a product.

What are the password requirements for Cloudstaff applications?

Either a Senior Cloud Engineer or a Senior Software Engineer can verify through Passbolt if an application key is on record.

The use of multi-factor authentication is not necessary when accessing CS Bolt for as long as the authorized staff is using a Cloudstaff IP address.

The UberTicket to file when requesting access to services related to the server, database or code repositories.

What is involved in the manual washing of a product's user access?

Shared credentials must be shared through CS Bolt so that access and changes can be logged.

If Google Single Sign-On (SSO) is used as an authentication method, the Google password policy applies.

Work-from-home staff who are authorized to access CS Bolt must use a VPN.

Account recovery is possible in CS Bolt.

The UberTicket to file when requesting the whitelisting or blacklisting of a site for a user.

Who is responsible for processing UberTicket requests to gain / revoke access to a restricted site or product?

The UberTicket to file when requesting a new application key or the update of an existing one.

The manual washing of user access on Cloudstaff applications is required to be done when?