Financial Services Industry

Financial Services Meeting - 6/23/21

• Chapter Events - Summer 2021
  • Moving from Cyber Security to Cyber Resiliency in the Cloud
  • CloudCon 2021
  • Account Takeover in Office 365
• CSA Blog
• CAIQ v4 Released
  
  
• Cyber Risk Institute analysis and mapping with CCM
  • "The Cloud Security Initiative for the Financial Sector" Circle working group
    • https://circle.cloudsecurityalliance.org/community-home1?CommunityKey=a5716497-f5b6-4e1d-b141-510eed7859b7
  • Mapping to CRI, CCM, and NIST CSF will be re-circulated
  • Upcoming meeting for mapping exercise will be announced
    
    
• Containers and Microservices in the Financial Industry
  
  • ACM Co-chairs Anil Karmel, Co-Founder and CEO at C2 Labs and Aradhna Chetal, Senior Director Executive at TIAA, gave a condensed preview of their upcoming presentation to the FFIEC regarding and auditors/examiners' approach and how they are addressing containers and microservices.
  • Financial Services group members were encouraged to provide feedback, best practices, and challenges in an open discussion regarding the content in the presentation that will be presented to the FFIEC.
  • Feedback to FFIEC will come from CSA to protect financial institution identities
  • The specifics and details of the presentation content was intended for the financial members in attendance on this monthly meeting
    
    
• Open Discussion, Q&A
  • Additional group follow up questions for presenters
  • Topic ideas for the research publications, initiatives, and upcoming meetings
    
    
• Next Zoom Meeting: July 28^th 8:00 AM PT
  • https://cloudsecurityalliance.zoom.us/j/94151107820
    
    • Containers and Microservices in Financial Services
      
      • Recap and reaction from FFIEC presentation on Containers
        
        
    • Lift & Shift case studies and best practices
      
      • Continued discussion, additional use cases, potentially develop framework, best practices and recommendations
      • Provide benefits, challenges, and recommendations for those following a lift and shift strategy
        
        
• Additional Resources
  • Financial Services research publications from CSA website
  • Participate in Research open peer reviews and surveys on CSA website
  • New Research Lifecycle - 2o Steps to Publication

------------------------------
Alex Kaluza
Research Coordinator
Cloud Security Alliance
------------------------------