2018-05-15 21:13:11 +00:00
|
|
|
name: Products and Services Narrative
|
|
|
|
acronym: PSN
|
|
|
|
majorRevisions:
|
|
|
|
- date: Jun 1 2018
|
|
|
|
comment: Initial document
|
|
|
|
---
|
|
|
|
|
|
|
|
# Products Narrative
|
|
|
|
|
|
|
|
Here we describe the key products marketed by our organization
|
|
|
|
|
2018-12-06 15:10:18 +00:00
|
|
|
# Products
|
|
|
|
|
|
|
|
## Product 1
|
|
|
|
|
|
|
|
Overview of product 1
|
|
|
|
|
|
|
|
### Architecture
|
|
|
|
|
|
|
|
Brief architectural discussion of product 1
|
|
|
|
|
|
|
|
### Security Considerations
|
|
|
|
|
|
|
|
Specific security considerations for product 1. Refer to policies, procedures here.
|
|
|
|
|
|
|
|
# References
|
|
|
|
|
|
|
|
## Narratives
|
|
|
|
|
|
|
|
List relevant narratives, probably including
|
|
|
|
Organizational Narrative
|
|
|
|
Security Narrative
|
|
|
|
System Narrative
|
|
|
|
|
|
|
|
## Policies
|
|
|
|
|
|
|
|
List relevant policies, probably including
|
|
|
|
Application Security Policy
|
|
|
|
Datacenter Policy
|
|
|
|
Log Management Policy
|
|
|
|
Password Policy
|
|
|
|
Security Incident Response Policy
|
|
|
|
Risk Assessment Policy
|
|
|
|
|
|
|
|
## Procedures
|
|
|
|
|
|
|
|
List relevant procedures, probably including access review, patching, alert monitoring, log review, pen testing
|