Key Deliverables

1.  Planning - include review of the project requirements (new deployment), discuss milestone timelines, identify the Customer’s project team members and follow-up action items
   

2.  Discover - Netcontroll will capture deployment scenario(s) to be designed and Palo Alto Networks will provide a Technical Requirement Document
     Provide system and integration requirements of Prisma Cloud Code Security
     Discuss the access requirements to Prisma Cloud Code Security Integration
     Discuss the code repository, CI/CD pipeline and IDE requirements
     Prepare technical detail gathering sheet for implementation
     Document and review technical details with the customer
   

3.  Setup - Netcontroll Professional Services, with the Customer’s assistance, will perform an initial remote Prisma Cloud Code Security setup. The configuration parameters are as follows:
     Enable Code Security on Prisma Cloud
     Setup administrative access
     Generate access key
     Validate IAM permissions for Code Security
     Connect and configure up to two (2) repositories from the following:
         GitHub
         GitHub Server
         Bitbucket
         Bitbucket Server
         GitLab Self-Managed
         GitLab
         Azure Repos
     Connect and configure one (1) CI/CD pipeline from the following:
        Terraform
        Cloud (Sentinel)
        Terraform Enterprise (Sentinel)
        GitHub Actions
        Jenkins
        CircleCI
        AWS Code Build
        Checkov
     Install Checkov CLI on Customer workstation or IDE tools (VScode or IntelliJ)
   

4.  Integration - Netcontroll Professional Services, with the Customer’s assistance, will perform an initial remote Prisma Cloud Code Security alert integration. The integration parameters are as follows:
      Enable Prisma Cloud Code Security alert notifications to one (1) of the following:
        Microsoft Teams
        Slack
        Splunk
        Webhooks
   

5.  Configuration - Netcontroll will, with the Customer’s assistance, perform an initial remote Prisma Cloud configuration. The configuration parameters are as follows:
       Enable or tune the scan configuration
       Build up to two (2) custom policies for build-time checks
   

Test policies using Checkov CLI on customer workstation Assist in remediation or suppression of IaC vulnerabilities and misconfigurations, up to four (4) items Assist ad ensure drift detection is working as intended 6. Knowledge Transfer - Netcontroll consultant will provide knowledge transfer upon completion of all the tasks A single session of up to two (2) hours for up to eight (8) participants. Review As-built environment Review the actions and decisions that were taken during the validation phase and work with proper resources for management knowledge transfer. Review the actions and remediations taken during the different phases of the project to go over an operations knowledge transfer.