Discuss securing the SSP github organisation

[meijer]

Protect against supply chain attack. Send email to board with issues identified and start (and conclude) discussion (leftover from SSP board meet #8)

[tvdijen]

I would like to remark that one board-member is not using MFA.
My suggestion would be to create a separate org, or use a proper tool like Jira to keep track of the stuff important to the board.
With all do respect; board members do not need (write) access to this Github-org and Github is not the best place to keep track of the things that are now here listed as issues.