Cloud Controls Matrix

Back to discussions
Expand all | Collapse all

CCMv4 Workshop Session - April 1st [Meeting Minutes]

  • 1.  CCMv4 Workshop Session - April 1st [Meeting Minutes]

    Posted Apr 02, 2021 11:44:00 AM

    Hi everyone,
                        please find below the minutes from our yesterday's workshop session.

    Agenda Items (AIs)

    1. CCMv4 - TSC 2017 mapping progress status (comparison review of CCM WG and AICPA group mapping versions)
    2. CCMv4.0 - CISv8.0 mapping progress status
    3. AoB

     

    Participants (11):
    Alexander Anago
    Madhav Chablani
    Angell Duran
    Damian Heal
    Frank Jaramillo
    Erik Johnson
    Claus Matzke
    Michael Roza
    Lefteris Skoutaris (PM)
    Ashish Vashishtha
    Dimitri Vekris

    Meeting Minutes (MMs)

    1. CCMv4 - TSC 2017 mapping progress status (comparison review of CCM WG and AICPA group mapping versions)
    • Consensus on the final mapping & gap analysis is met for 5/17 domains,
    • Discussion for the resolution of comments and progress update took place with professionals present in the call for the CEK, DSP and UEM domains,
    • Frank and Madhav joined the review on A&A and CCC respectively,
    • STA is lacking a reviewer (anyone interested, please contact the PM),
    • All professionals are kindly asked to consult the 'status comments' column (and messages attached within the mapping itself) for assigned pending actions (AP1).
    • Hard deadline is set for April 15th.
    CCMv4.0 - TSC 2017 Mapping (progress status snapshot)


    2. Progress status of the CCMv4.0 - CISv8.0 mapping exercise and call for participation
    • 4/17 domain mappings are delivered (including review by 2 professionals),
    • Domains DSP and LOG have accepted reviews from both professionals which are undergoing a final consolidation and soon to be delivered,
    • Missing 2nd reviewer on 3 domains HRS, SEF, UEM (see open slots with '?' at the screenshot below),
    • All professionals are kindly asked to consult the 'status description' column (and messages attached within the mapping itself) for assigned pending actions (AP1).

    CCMv4.0 - CISv8.0 Mapping (progress status snapshot)


    3. AoB
    • Next CCMv4 workshop call is scheduled on April 8th, 6 pm EEST (9 am PST/ 5 pm CET/ 12 pm EST).

    Action Points (APs)
    AP1: All professionals are kindly asked to consult the 'status' column per mapping (and messages attached within the mapping itself) for assigned pending actions (AP1).



    Please let me know if anything important is missed above.
    Thank you all for your attendance and support.
    Best regards,

    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------