OpenAI - Tech Stack - Updating Critical System Tier to Tier 1 for OpenAI based on a data classification of Red
OpenAI has a data classification of red which results in a Tier 1 Mission Critical
Critical System tier. Snippet from Handbook:
Any system that contains RED Data per the Data Classification Standard OR is a Third Party Sub-Processor will be a Tier 1 Mission Critical system. This is due to the fact that this data is customer owned and uploaded and as such, has been deemed to be mission critical in nature.
Tech Stack - Update Existing System
Business/Technical System Owner or Delegate to Complete
Please do not merge before the Business Systems Analysts have reviewed and approved.
-
Rename this MR's title to [System Name] - Tech Stack - Update Existing System
-
Update data field(s) for the existing system within the 'Changes' tab of this MR. Commit update when ready. More instructions are here.
Are you changing the existing system's provisioner(s)?
-
Yes. Create an Issue to add the new provisioner(s) of the system to the appropriate Google/Slack/GitLab groups: - [Issue link]
-
No
Are you removing an existing system from the Tech Stack?
-
Yes. Be sure to complete a Tech Stack Offboarding Issue as well. -
No
Security Risk to Complete
Not required prior to merging
-
Create Existing System - TS Update Tracking Issue in StORM board: - [Tracking Issue link]
-
Once updates are finalized, sync changes with the ZenGRC System Object
/cc @gitlab-com/gl-security/security-assurance/security-risk-team