system-security-plan.yml

---
name: apps-gov-v2
uniqueID: PIF-20160101-20161231-07
version: 2.0.0
# descriptions:
# https://18f.gsa.gov/dashboard/
phase: beta
# `D26 Civilian Operations` is most common for 18F projects.
# http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol1-Rev1.pdf#page=23
information-types:
- D26 Civilian Operations

# https://pages.18f.gov/before-you-ship/ato/levels/
confidentiality: low
integrity: low
availability: low
security-baseline: open data

system-type: major
level-of-identity-assurance: <0 if no authentication, or a link to SSP of the forthcoming identity system>
staff:
  authorizing-official:
    name: Aaron Snow
    title: 18F Executive Director
    org: General Services Administration
    unit: 18F
    email: 18F@gsa.gov
  system-owner:
    name: Andrew Stroup
    title: Director, Product and Technology
    org: General Services Administration
    unit: PIF
    email: pif-team@gsa.gov
  system-management:
    name: Andrew Stroup
    title: Director, Product and Technology
    org: General Services Administration
    unit: PIF
    email: pif-team@gsa.gov
  system-security-officer:
    name: Andrew Stroup
    title: Director, Product and Technology
    org: General Services Administration
    unit: PIF
    email: pif-team@gsa.gov
  technical-lead:
    name: Luke Keller
    title: Presidential Innovation Fellows
    org: General Services Administration
    unit: PIF
    email: pif-team@gsa.gov
leveraged-authorizations:
- https://www.fedramp.gov/marketplace/compliant-systems/amazon-web-services-aws-eastwest-us-public-cloud/
purpose: https://github.com/presidential-innovation-fellows/apps-gov-v2/blob/master/README.md
components:
- https://github.com/presidential-innovation-fellows/apps-gov-v2

# these will be the same unless your architecture is especially complex
system-diagram: https://drive.google.com/open?id=10E2rAiyboFQQHbvp31gIpIDPYNb0OVgKOPNthQX0WGk
network-diagram: https://drive.google.com/open?id=10E2rAiyboFQQHbvp31gIpIDPYNb0OVgKOPNthQX0WGk

environments:
- Cloud Foundry
- Amazon Web Services East
user-types:
  developer:
    functions:
    - deployment
    - engineering
controls:
- https://github.com/18F/Infrastructure/issues/601