Cloud Controls Matrix

Hi team,
            please find below the points discussed at the recent CAIQv4 meeting.

Agenda:

1. What are the latest ERT updates & most up-to-date V4 controls to align CAIQv4 with
2. Check on progress status of CAIQ dev. per domain
3. AoB

Participants (6):
Odutola Ekundayo
Roberto Hernandez
Erik Johnson
Michael Roza
Lefteris Skoutaris
Ashish Vashishtha


Meeting Minutes:

1. What are the latest ERT updates & most up-to-date V4 controls to align CAIQv4 with

• ERT review has completed and all domains at the CAIQ workbook can now be synced with the ERT output,
• CAIQ team is kindly invited to consult column "H" under "Status Tracker" tab at the main CCMv4 workbook
• The information shared under "H" will provide guidance for the latest version of CCMV4 controls to use for syncing the CAIQ (Lefteris is notifying the CAIQ team for any changes applied to V4 controls)
• Reviewers assigned per CAIQ domain are kindly invited to sync CAIQ controls to those of the V4 (AP1)

2. Check on progress status of CAIQ dev. per domain

• A&A questionnaire is complete,
• CCC is pending a final review (ready to close, a comment from Angela is pending to discuss at next call)
• 9 domains are under peer review and progressing well,
• Michael Roza has started working on CEKM CAIQ development,
• Lefteris to copy STA at the CAIQ workbook and notify Erik to begin the CAIQ development (AP2),
• Ashish noticed an inconsistency of terminology used under the HRS (terms: individuals, personnel, workforce personnel, employees) that should be brought to the attention of the ERT team (AP3),
• Odutola kindly offered to sync the latest updated V4 controls in SEF, HRS, DSP, IAM, TVM with the CAIQ workbook (AP4),
• Ashish kindly offered to continue as a 2nd reviewer on AIS (AP5),
• BCR is waiting for the review of Harish and Agni (if not active assign other reviewers),
• DCS and TVM are waiting for 3rd reviewer to be assigned,
• SEF is reviewed by Tola and Ashish, If Harish is not active, should make a final review.

3. AoB

• Next call is scheduled on 26th August, 7pm EEST (9 am PST / 12 pm EST / 6 pm CET).

Action Points
AP1: Reviewers assigned per CAIQ domain are kindly invited to sync the CAIQ controls to those of the V4.
AP2: Lefteris to copy STA at the CAIQ workbook and notify Erik to begin the CAIQ development.
AP3: Ashish noticed an inconsistency of terminology used under the HRS (terms: individuals, personnel, workforce personnel, employees) that should be brought to the attention of the ERT team.
AP4: Odutola kindly offered to sync the latest updated V4 controls in SEF, HRS, DSP, IAM, TVM with the CAIQ workbook.
AP5: Ashish kindly offered to continue as a 2nd reviewer on AIS.


Thank you for being in the call with us.

Please let me know if anything essential is missed above or if you wish to ask any questions.

Best,

Lefteris


------------------------------
Eleftherios Skoutaris
Program Manager
Cloud Security Alliance
------------------------------