Page MenuHomePhabricator
Create Task
Maniphest T105534

Document and report initial metrics for security bug handling
Closed, ResolvedPublic
Actions

Related Objects
Search...

Event Timeline

• csteipp created this task.Jul 10 2015, 5:49 PM
• csteipp claimed this task.
• csteipp raised the priority of this task from to High.
• csteipp lowered the priority of this task from High to Medium.
• csteipp updated the task description. (Show Details)
• csteipp added a project: Security-Team.
• csteipp moved this task from Incoming to Epics in progress on the Security-Team board.
• csteipp added subscribers: Aklapper, • csteipp.
• csteipp raised the priority of this task from Medium to High.Aug 14 2015, 5:22 PM

All engineering teams need documented KPI's by Aug

• csteipp added a comment.Aug 14 2015, 5:23 PM

https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Metrics

• csteipp removed a subtask: T109106: Document task prioritization (bug triage) process of WMF Security Team.Oct 13 2015, 11:51 PM
• csteipp closed this task as Resolved.Oct 13 2015, 11:55 PM

As documented on https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Metrics,

  • Security Bugs (number open by priority each month)
  • Security Reviews (number open each month)
  • Training (training by quarter with number of attendees)
  • Incident Response (number of incidents by quarter)

Are being tracked. Actual number of security bugs open, and incident documentation is considered private to the organization, and is tracked privately.

• csteipp moved this task from Epics in progress to Our Part Is Done on the Security-Team board.Oct 13 2015, 11:55 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL