Data Security

Data Security Working Group Meeting - 10/10/24

Publications in Development:

• Data security within an AI Environment, Development - 10/30
• Data Lifecycle, Development - 10/30

Proposals:

• Highly Sensitive/Confidential Data
• Privacy Enhancing Technologies for AI 
• Perils of Personal Identifiable Information in LLMs

Meeting Summary:

The meeting covered various topics including upcoming holidays, project updates, and industry events. Discussions included new proposals, progress on research papers, and the CSA Global AI symposium. Key points also involved data management, cybersecurity frameworks, and potential collaborations on ongoing projects.

CSA Global AI Symposium and AI in Medical Research:

• Alex informed Onyeka about the upcoming CSA Global AI Symposium, scheduled for October 20th to 24th. The event will span over three days, with sessions running till around 1:30 PM each day. Onyeka confirmed her registration for the event. Alex also discussed a new paper on AI and Medical Research: Applications & Considerations, focusing on healthcare, drug discovery, drug design, retrosynthesis, cognitive digital twin, medical bias, data privacy, and PHI and PII requirements.

Mapping CCM to NIST Cybersecurity Framework:

• Alex and Onyeka discussed the mapping of the newest version of CCM to the nearest version of the NIST cybersecurity framework. They also discussed the Top Concerns with Vulnerability Data and the importance of data management. Additionally, they touched on a follow up to a paper from 2017 about Cloud Security for Startups 2024, which provides examples and considerations for startups. Onyeka expressed interest in these topics, particularly for her company that uses both CCM and CSA. 

Progress and Participation in proposed Data Security/AI Papers:

• Alex discussed that Rocco has recently proposed and started development of two papers, Privacy Enhancing Technologies for AI, and Perils of Personal Identifiable Information in LLMs. He mentioned that these papers were initially sent in a document format and were now being converted into a CSA template format to work from. He encouraged participation in the papers, stating that anyone can sign up for a section. Vi expressed interest in the data retention and archiving section, but noted that it appeared to be already completed. Alex suggested that if there were any gaps in the sections, people could continue to add to them. He also mentioned that all changes were tracked on the papers through the comments.

Publication development progress and open contributions discussion:

• Alex discussed the progress of Data Security within an AI Environment, with Alex expressing openness to contributions from anyone. Onyeka expressed interest in working on a summary and was willing to contribute to other sections. Alex mentioned it would be nice to have conclude development of Data Security with an AI Environment, and Data Lifecycle by the end of October, and that contributions were welcome. Onyeka agreed to find time to work on the project. Alex also mentioned that he would follow up with Oliver, Gopi, and Rocco who had previously expressed interest in working on the project but had been pulled away due to other tasks.

------------------------------
Alex Kaluza
Research Analyst
Cloud Security Alliance
------------------------------