Line 391: |
Line 391: |
| Request that TBS generate a dashboard of your application portfolio. This will ensure your decisions have been correctly reflected. A sample of the dashboard that is generated is found here: | | Request that TBS generate a dashboard of your application portfolio. This will ensure your decisions have been correctly reflected. A sample of the dashboard that is generated is found here: |
| | | |
− | [[File:SamplePortfolioAnalysis.png|800px||center|alt=Sample Application Portfolio Analysis]] | + | [[File:SamplePortfolioAnalysis.png|1000x1000px|center|alt=Sample Application Portfolio Analysis]] |
| | | |
| === ''Engage SSC Project Manager and WLM Factory'' === | | === ''Engage SSC Project Manager and WLM Factory'' === |
Line 420: |
Line 420: |
| == '''References''' == | | == '''References''' == |
| ====== '''TB Policies & Standards''' ====== | | ====== '''TB Policies & Standards''' ====== |
− | [[https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=12755| Policy on Management of Information Technology ]] | + | [[https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=12755| Policy on Management of Information Technology] ] |
| | | |
− | [[https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=16578| Policy on Government Security ]] | + | [[https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=16578| Policy on Government Security] ] |
| | | |
− | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/direction-electronic-data-residency.html| Direction for Electronic Data Residency, ITPIN No: 2017-02 ]] | + | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/direction-electronic-data-residency.html| Direction for Electronic Data Residency, ITPIN No: 2017-02] ] |
| | | |
− | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/direction-secure-use-commercial-cloud-services-spin.html| Direction of the Secure Use of Commercial Cloud Services: Security Policy Implementation Notice (SPIN) ]] | + | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/direction-secure-use-commercial-cloud-services-spin.html| Direction of the Secure Use of Commercial Cloud Services: Security Policy Implementation Notice (SPIN)] ] |
| | | |
| ====== '''Guidance''' ====== | | ====== '''Guidance''' ====== |
− | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/government-canada-security-control-profile-cloud-based-it-services.html| Government of Canada Security Control Profile for Cloud-Based GC IT Services ]] | + | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/government-canada-security-control-profile-cloud-based-it-services.html| Government of Canada Security Control Profile for Cloud-Based GC IT Services] ] |
| | | |
− | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/cloud-security-risk-management-approach-procedures.html| Government of Canada Cloud Security Risk Management Approach and Procedures ]] | + | [[https://www.canada.ca/en/government/system/digital-government/modern-emerging-technologies/cloud-services/cloud-security-risk-management-approach-procedures.html| Government of Canada Cloud Security Risk Management Approach and Procedures] ] |
| | | |
− | [[https://cyber.gc.ca/en/guidance/baseline-security-requirements-network-security-zones-government-canada-itsg-22| CSE ITSG-22 Baseline Security Requirements for Network Security Zones in the Government of Canada ]] | + | [[https://cyber.gc.ca/en/guidance/baseline-security-requirements-network-security-zones-government-canada-itsg-22| CSE ITSG-22 Baseline Security Requirements for Network Security Zones in the Government of Canada] ] |
| | | |
− | [[https://cyber.gc.ca/en/guidance/network-security-zoning-design-considerations-placement-services-within-zones-itsg-38| CSE ITSG-38 Network Security Zoning – Design Consideration for Placement of Services within Zones ]] | + | [[https://cyber.gc.ca/en/guidance/network-security-zoning-design-considerations-placement-services-within-zones-itsg-38| CSE ITSG-38 Network Security Zoning – Design Consideration for Placement of Services within Zones] ] |
| | | |
− | [[https://www.cse-cst.gc.ca/en/system/files/pdf_documents/itsp.30.031v2-eng.pdf| CSE ITSG.30.031 V2 User Authentication Guidance for Information Technology Systems ]] | + | [[https://www.cse-cst.gc.ca/en/system/files/pdf_documents/itsp.30.031v2-eng.pdf| CSE ITSG.30.031 V2 User Authentication Guidance for Information Technology Systems] ] |
| | | |
− | [[https://cyber.gc.ca/en/guidance/guidance-securely-configuring-network-protocols-itsp40062| CSE ITSG.40.062 Guidance on Securely Configuring Network Protocols ]] | + | [[https://cyber.gc.ca/en/guidance/guidance-securely-configuring-network-protocols-itsp40062| CSE ITSG.40.062 Guidance on Securely Configuring Network Protocols] ] |