diff --git a/SecurityPolicy.html b/SecurityPolicy.html index 79dfa62..e6d8558 100644 --- a/SecurityPolicy.html +++ b/SecurityPolicy.html @@ -48,6 +48,7 @@ a:hover {
-Access to Accounts +Access to privileged accounts (root and user via SSH or console) must be strictly controlled. Passphrases and SSH private keys used for entering into the systems @@ -1064,7 +1065,7 @@ See §3.4.2.
Support Engineers do not have any inherent authority to take any action, -and they have have to get authority on a case-by-case basis. +and they have to get authority on a case-by-case basis. The authority required in each case must be guided by this policy or the Security Manual or other clearly applicable document. @@ -1085,7 +1086,7 @@ Support Engineers have these responsibilities:
ABC is to be done on every individual in a critical role. +See §1.1.1.
The Board should deliberate directly and in full. -Board members who are also active in the area should recuse from the vote, +Board members who are also active in the area should +recuse +abstain +from the vote, but should support the deliberations. Deliberations and decisions should be documented. All conflicts of interest should be examined.