Legacy TLS cipher on reporting endpoint
A reporting endpoint negotiates a deprecated TLS cipher pending remediation.
Should a temporary exception be routed for the deprecated cipher?
This request has been raised automatically and is awaiting triage before assignment to the accountable role.
- Direct observation
TLS scan result
TLS_RSA_WITH_AES_128_CBC_SHA negotiated
- Source
- Endpoint scanner
- Timestamp
- Today 08:10
- Method
- Automated collector
- Confidence
- High
Requires Treatment & Exceptions authority (System Owner). Acting as System Owner in this demonstration.
- Security Architect
May validate system-model assertions and architecture conflicts.
- Security Assessor
May determine control effectiveness.
- System OwnerRequired
May approve treatments and operational exceptions within delegated authority.
- Risk Owner
May accept residual risk within delegated authority.
- Authorising Officer
May authorise system operation.
Authority is not transferable by discovery. A Security Architect cannot accept residual organisational risk merely because they identified it, and a Security Assessor cannot issue system authorisation.
- Today 08:11Exception request auto-raised