1087017 - RRA for NetX DAM (Digital Asset Management)

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance: Review Request, task)

Description

[Sean Rich [:srich]]

A digital asset management solution (“DAM”) will enable content creation, storage and sharing capabilities of digital assets in a way that scales to meet new levels of demand coming from product line growth.

The goal of the project is to source and implement a DAM for the Engagement Team that hosts multiple terabytes of image, video and presentation files. 

As part of the Design phase of the IT SDLC, this solution requires an RRA.  Let's do it.

Comment 1

[Sean Rich [:srich]]

For DAM architecture, see:
https://docs.google.com/a/mozilla.com/document/d/1ve9i2jaNWYtkBHAKQ8A2DwoTPv35V1MOpVBoxI7zzb4/edit#heading=h.rk3dwq2z4hd2

At the end of that document you'll find a link to the reference architecture that NetX provided.

Comment 2

[Sean Rich [:srich]]

For Opportunity Assessment, see: https://docs.google.com/a/mozilla.com/document/d/16LXfK9tVYQjdm1UyT85S6whRZp5yeL8eX2Azrx1ZicY/edit?usp=sharing


Project artifacts are in the project folder here: https://drive.google.com/a/mozilla.com/folderview?id=0B0PPzqHbJSSWOVp1RzluTlM4QTA&usp=sharing

Comment 3

[Julien Vehent]

RRA scheduled for Thursday, Oct 30th at 1300PDT.

Comment 4

[Julien Vehent]

RRA recorded at https://docs.google.com/a/mozilla.com/spreadsheets/d/1YNHdiwOLWjE1Y47KmgIAbTLGaZ5YaJuD2lXkdEt941s/edit#gid=1112083357

Noteworthy:
* Data classification is INTERNAL. DAM is not meant to be used for sharing confidential material with partners (at least, not without an extra layer of security, such as encrypted archives).
* Availability is HIGH, the goal being to replace the existing Assets site.
* Recovery is LOW. DAM is *not* a backup solution, and data loss may happen.

Thank you for attending. Let me know if this project needs anything else from OpSec.