[Qgis-user] Questions for internal approval

[James Khng]

Hi Team

I am trying to get this software approved for installation with our internal IT Team.

They have come back with the following questions. Any help would be much appreciated!


  *   Who supports the application? Is there an enterprise agreement or is it self-supported?

  *   Who is responsible for patching/upgrading? Also, is there any schedule available?

  *   What is the incident response plan, process/procedure? Who will be the responsible team if there is any security incident related to this product?

  *   Is there a vendor critical patch notification mailing list?

  *   Is there any certified image? (Malware/Trojan free)

  *   Who is providing the technical support?

  *   Is there best practice defined for hardening/configuration by vendor?

  *   Is there any documentation available for this application?

  *   Is there any logging or SIEM capability?

  *   Will there be single sign-on and MFA implemented for this application?

  *   Will this application be routed through PAM or will local admin access be required



Thanks
James


This email and any accompanying documents are confidential, protected by copyright or subject to legal professional privilege. If you are not the intended recipient, any use, dissemination, forwarding, printing or copying of this email and any accompanying documents is strictly prohibited. If you have received this email in error please notify the sender immediately and delete it from your system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240904/53a8cdf8/attachment.htm>