Platform risk assessments (ROS) ¶

The nais team has conducted the following risk assessments:

• GCP Data storage (Buckets and Postgres)
• GCP Access control setup
• Access to Kafka from GCP
• Logs on GCP
• Google Kubernetes Engine
• Sentry in GCP
• Aiven Kafka - Vendor assessment
• Other Aiven products (OpenSearch, Valkey)
• Google Secret Manager
• Dataplattform (including BigQuery)
• Use of ansatt.nav.no
• Use of Nais Console

(Note that all risk assessments link to the NAV internal tool TryggNok.)