Cloud Key Management

CSA updates:

• Upcoming Cloudbytes

• Anatomy of a cloud breach: how to harden your cloud against attack (Wiz) -Tuesday 11/9 at 10am PST

• Can security and usability co-exist in a remote working environment? (Wandera/Jamf) - Wednesday 11/10 at 10am PST

• Recent Releases

• Medical Device Incident Response Playbook

• Secure Connection Requirements of Hybrid Cloud

• Recent Localizations (Japanese, Turkish, Spanish, Hungarian, Chinese, Korean)

• Open Peer Reviews

• Blockchain/Distributed Ledger Technology (DLT) Risk and Security Considerations - open until 11/18

• Corda Enterprise 4.8 - Architecture Security Report - open until 11/21

• Corda Enterprise 4.8 - Security Controls Checklist  - open until 11/21

Meeting Minutes:

• Discuss on the working group's existing expertise of Private HSM in order to work on the new document (and 4th in line from the Common Cloud KMS patterns) called 'Recommendations for Adopting a Cloud-Native External KMS'
• Paul to provide feedback on amazon and microsoft participation on the next pattern we'll be working on.
• All working group participants to read the links provided on Private HSM:
  https://docs.microsoft.com/en-us/azure/key-vault/managed-hsm/best-practices
  https://aws.amazon.com/blogs/security/cloudhsm-best-practices-to-maximize-performance-and-avoid-common-configuration-pitfalls/
  https://cloud.google.com/kms/docs/hosted-private-hsm
• Next working group call:
  
  Wednesday 10th November 2021, 09:00 a.m. PST / 12:00 p.m. EST / 18:00 CET
  url: https://zoom.us/j/93617880747  (Meeting ID: 936 1788 0747)
  
  

------------------------------
Kind regards,
Marina
------------------------------