#opnfv-meeting: OPNFV Security Group

Meeting summary

1. amendments to last meeting minutes (LukeHinds, 13:56:40)
   1. https://etherpad.opnfv.org/p/opnfv-sec-meetings <- agenda (LukeHinds, 13:57:48)
   2. https://wiki.opnfv.org/security/meetings/11022015 -< last meeting minutes (LukeHinds, 13:59:26)
   3. AGREED: meetings ok (LukeHinds, 14:05:33)
   4. AGREED: agenda (LukeHinds, 14:08:05)
   5. https://etherpad.opnfv.org/p/opnfv-sec (MikeCamel, 14:15:28)
   6. consider secure coding guidelines (MikeCamel, 14:28:03)
   7. AGREED: we will remain on tech-discuss, but use a tag [opnfv-sec] (LukeHinds, 14:31:55)
   8. AGREED: on advisory / vuln handling (LukeHinds, 14:36:25)
   9. AGREED: Interwork with other security groups - with members present on all upstream groups (LukeHinds, 14:43:46)
   10. AGREED: remove governance and risk pieces from scope (MikeCamel, 14:49:23)
   11. AGREED: Security Guidelines - Develop / reference existing documentation on security best practices around installation, configuration, hardening. (LukeHinds, 14:51:04)
   12. AGREED: Internal OPNFV Security Best Practices - Scope should cover both deployment / configuration etc (for internal infra), and Development (secure coding conventions etc)? (LukeHinds, 14:57:02)
   13. AGREED: Security Change Reviews (gerrit) (LukeHinds, 14:59:15)
   14. AGREED: Research and Development (LukeHinds, 15:01:14)
   15. ACTION: provide more phone access numbers (investigate) (LukeHinds, 15:02:10)

Action items

1. provide more phone access numbers (investigate)

People present (lines said)

1. LukeHinds (20)
2. MikeCamel (16)
3. collabot (8)
4. Luke (0)
5. Hinds (0)