Developer review of infosec documentation

[richford]

@yeatmanlab/roar-maintainers and @maximilianoertel

This repository contains our first drafts of ROAR's information security and data privacy policies. I'd appreciate your review on the following:

• The ROAR data privacy and information security manual (MD, PDF)
• The ROAR software development lifecycle (SDLC) policies (MD, PDF)
• The employee onboarding checklist (MD)
• The employee offboarding checklist (MD)
• Third party vendor assessments for the third party vendors that ROAR uses (directory).

Please submit any comments, questions, or concerns as new issues on this repository, following the policies that I have tentatively laid out in the SDLC document. All types of comments are welcome, from small typos and rephrasing to changes in the big picture.