Scheduling the security review walkthrough

Hi Nadia, Thanks for your time on our call. As promised, I'd like to get the security review walkthrough into the diary so that you have what you need well ahead of your capacity providers looking at the pack. To be precise about what I'm proposing: a working session of about an hour where I take you through how the brain is built and run inside your own Snowflake account, which connectors read from which systems, how access is controlled, and where the data sits. I'll bring the architecture diagram and answer the questionnaire items live, then follow up with everything in writing. The short answer to "what do you need from us beforehand" is the questionnaire, and the longer answer is anything else your auditors have asked you to hold on file for a supplier like us. If you send me the questionnaire as it stands, I can pre-fill what I'm certain of and flag anything I need to check before I commit to an answer. Could you let me know which days early next week suit you? Afternoons are easiest on my side, but I'll work around you. Thanks, Hannah

Hello Hannah, Thank you for this, and for the clear outline. A working session is the right format. A few points from my side, for the audit trail: First, Tuesday or Wednesday afternoon next week would suit me. I would prefer to avoid Monday, as I will be catching up on open items from last time. Second, please can you confirm in writing where the data is stored and processed, and whether anything leaves our Snowflake account at any point? Can you evidence that, rather than describe it? A diagram with the data flows marked would help. Third, I will need the access-control answers in the questionnaire itself, not only given verbally in the session. I am not able to record a control as satisfied on a verbal answer. Finally, one caveat so that expectations are clear: I cannot give you a sign-off date until our capacity providers have seen the completed pack. I can tell you the order of play once the session has happened. I will attach the questionnaire in its current state shortly. Kind regards, Nadia

Hi Nadia, That's all very clear, thank you. Tuesday afternoon works for me. Shall we say 14:00? If that is too tight on your side, Wednesday at the same time is also free. On your points: Data location: I'll put that in writing. I'll send you the data-flow diagram with the boundaries marked, plus a short written statement of what runs where, before the session so you can read it first. Access control: understood. I'll fill the questionnaire answers in properly and attach the supporting evidence for each one. Where I need to check a detail before I commit to it, I'll say so in the document rather than guess. Sign-off: no problem at all. I'd much rather the pack reaches your capacity providers complete than quickly. Once we've met I'll send the full set in one go, so you can pass it on as a single bundle. Send the questionnaire over whenever it's ready and I'll start on it today. Thanks, Hannah