Cloud Key Management

The group discussed the 2 documents they are currently starting to work on by providing updates accordingly.

1. 'Post-Quantum Cryptography' document

The team discussed the writing process for this document. John and his colleague Puhui have been assigned to write the final two chapters. Marina provided guidance on formatting, including using footnotes for short explanations/specifications, and references for the use of other document sources.
Sunil mentioned rescheduling a dedicated meeting on this work, that was missed the previous week.

2. 'xYOK' document:

The team discussed the scope and content of this document intended to provide an overview of key management models and responsibility patterns, focusing on cloud service providers' native key management systems.
They clarified the document's purpose as a precursor to a visually optimized version, emphasizing the need for clear language to avoid confusion with specific system patterns. The group agreed on categorizing BYOK and similar acronyms as key management responsibility patterns and discussed the need for further refinement to ensure consistency in terminology across the industry. Team reviewed the xYOK Matrix to ensure consistency in terminology. 

Next steps:

•  @Sam Pfanstiel to update the 'xYOK' document with discussed changes
• @Sam Pfanstiel to refine language around 'potential access' among different key types for consistency
• Marina to prepare document for public peer review after it is ready, and has added scope and purpose to the documen
• WG to decide on final terminology for the  'xYOK' matrix. 
•  @Sunil Arora to schedule a dedicated meeting on the Post-Quantum doc

Next call: 27 June

Time: 09:00 a.m. P.T. / 12:00 p.m. E.T. / 16:00 UTC

URL: https://cloudsecurityalliance.zoom.us/j/88930805728 (Meeting ID: 889 3080 5728)