If issue is assigned to your backlog > any issue with label security-reviewed and Poppy CSP should have CSP details added and PO makes request to RMS group. Otherwise plan to address issues in "Q"
Have questions about the request, contact the issue reporter and escalate to Craig McNally if no response
PO will not need to make a CSP request IF the issue impacts several apps/modules. Security team will make CSP request.