[cosmos-dev] Security requirements and Testing for 231400

["Mohsin, Jimmy" <Jimmy.Mohsin@xxxxxx>]

All,

 

This is in regards to the (very good) Higgins meeting we had earlier today.  Please note that from a CA perspective, the current requirements are focused on Authentication and Encryption.  The Authorization requirements will definitely be deferred to a later phase, since that is a much more involved Security topic.

 

We have completed testing for ER 231400 using one of CA’s products.  Would anyone like to test this ER with one of their products as well?  Also, should we report the test approach from our end (we will obviously report the results)?  The key idea behind this was setting up the CA product as a non-COSMOS MDR; and subsequently passing the authentication credentials from COSMOS to the product and executing queries.

 

Thanks,

Jimmy Mohsin

Cell   +1-609-635-1703