The linked SOP page is empty https://m.mediawiki.org/wiki/Wikimedia_Security_Team/Standard_Operating_Proc...

I think it is critical to know what the procedure is in order to understand the context for the 30-days pre-release review policy. Is there another page describing the SOP?

On Tuesday, 19 February 2019, Charlotte Portero cportero@wikimedia.org wrote:

I am pleased to announce that the Security Team has a new Security Reviews process.

"Wikimedia Security Team/Standard Operating Procedure/Security Readiness Reviews" [0] replaces the former "Wikimedia Security Team - Security Reviews" [1].

Please note: one of the new requirements is that there is *30-day* pre-deployment date submission.

If you have any questions after reviewing the Standard Operating Procedure (SOP), please contact the Security Team at security-team@wikimedia.org.

Thank you,

Charlotte Portero Project Manager, Security

[0]

https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Standard_Operating_Pr...

Security_Readiness_Reviews [1]

https://www.mediawiki.org/w/index.php?title=Wikimedia_Security_Team/Security...

---

Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Hi Charlotte,

Thanks for the announcement.

I have a suggestion. Instead of inviting people to email questions about the process, you could encourage people to place questions on the talk page unless there is a reason for making a certain question be nonpublic. This would facilitate interaction among people who use this process, and hopefully reduce duplication of effort for people who respond to emails that are sent to security-team@.

Best wishes,

Pine ( https://meta.wikimedia.org/wiki/User:Pine )