...
Hannah (meeting 8 July 16) - but what if is something essential marked zero? We could have mandatory and optional sub-requirements.
Adam - Since there is is not an audit, I don't believe it makes sense to talk about mandatory vs. optional. The whole guide is informational as I have viewed it. IF certain subcomponents are important to you as a consumer of the information, you would look at those individual scores.
Standardize Language
The spreadsheet and SCIv1 document have ambiguities. For example, one refers to service providers and another to service operators.
...
Adam suggests that we could see the section OS to be more of a "baseline standard". He will send a copy of the XSEDE Baseline Security document.
Eric points out that we need to include post-mortem analysis as a way of learning lessons. Do we expand IR2 or create a new bullet?
Adam- I think a new bullet makes more sense than stuffing it in IR2 IMO.
Operational Security
[OS1]
...