Financial Services Industry

Financial Services Meeting - 5/26/21

• Chapter Events - Summer 2021
  • How to Think Like a Hacker to Avoid Cloud Exploits
    • June 10th, 2021
  • CSA Blog
  • Certificate of Cloud Auditing Knowledge (CCAK)
    
    
• Cloud Risk, Governance, and Measurement Survey - John Yeoh
  • CSA is conducting cloud risk interviews to assess the maturity of public cloud and risk management within the enterprise.
  • The goal is to understand the challenges and effectiveness of current risk management practices, and to help enterprises identify better practices to reduce risk, address risk tolerance, and understand the impact of effective risk management practices in the cloud.
    
    
• Enterprise Architecture Overview  - Sean Heide
  • Sean provided an overview, explanation, and demonstration of the newly released Enterprise Architecture v2 mapping guide
    
  • Press Release: https://cloudsecurityalliance.org/press-releases/2021/05/18/cloud-security-alliance-enterprise-architecture-reference-guide-v2-harmonizes-business-security-and-technology/
  • EA Reference Guide v2: https://cloudsecurityalliance.org/artifacts/enterprise-architecture-reference-guide-v2/
    
    
• CSA & Cyber Risk Institute Risk Mapping Project - John DiMaria
  • Cooperative project to map and integrate CSA's Cloud Controls Matrix and CRI's Financial Services Cybersecurity Profile.
  • The goal is to define the scope, objectives and technical specifications of the Cloud Security Framework for Financial Services.
  • Overview from last week's first meeting
  • https://cloudsecurityalliance.org/artifacts/cloud-security-initiative-for-the-financial-sector-working-group-charter/
    
    
• Open Discussion, Q&A, Next Meeting
  • Group questions for presenters
  • Topic ideas for the research publications, initiatives, and upcoming meetings 
    
    
• Next Zoom Meeting: June 23^rd 8:00 AM PT
  • https://cloudsecurityalliance.zoom.us/j/94151107820
    
    • Containers and Microservices in Financial Services discussion
      
      • Guest Speakers from ACM working group Anil Karmel and Aradhna Chetal will speak on their presentation to the FFIEC, and auditors/examiners' approach and how they are addressing containers and microservices.
        
    • Continue Lift & Shift case studies and best practices
      • Sean Gray provide insight into PayPal's lift and shift strategy
      • Other interested companies welcome to best practices and experience at upcoming meetings, contact [email protected]
        
        
• Additional Resources
  • Financial Services research publications from CSA website
  • Participate in Research open peer reviews and surveys on CSA website
  • New Research Lifecycle - 2o Steps to Publication

------------------------------
Alex Kaluza
Research Coordinator
Cloud Security Alliance
------------------------------