security-doc/security-threat-analysis/source/templates/review-notes.rst

Security review notes template

<Project name> security review notes - <version/release>

Status: Draft/Completed

Release: Juno/Kilo/Liberty/Newton

Version: 0.01 if applicable

Review Date: mm/dd/yyyy

Review Body: <OpenStack Security Project/Name of Third Party Organisation >

Contacts:

• PTL: name - irc handle
• Architect: name - irc handle
• Security Reviewer: name - irc handle

Reviewers:

• <Project>: <reviewer names/handles>
• <Security Review Body>: <reviewer names/handles>
• OpenStack Security Project: <reviewer names/handles> (only applicable for third party reviews)

Review

Abuse cases

• <abuse case>
• <abuse case>

Architectural diagram walkthrough

• notes

Sequence/DFD diagram walkthrough

• notes

Actions

1. action 1
2. action 2