Data Security

Data Security Working Group Meeting - 12/5/24

Publications in Development:

• Cybersecurity and the Data Lifecycle - Peer Review - 1/5/25. Review and continue internal development.
• Data security within an AI Environment - Review and continue internal development, prior to public peer review.

Proposed:

• Highly Sensitive/Confidential Data - 2025
• Privacy Enhancing Technologies for AI - 2025
• Perils of Personal Identifiable Information in LLMs - 2025
• DORA Guidelines & Objectives - 2025

Meeting Summary:

Alex announced the continuation of the Cloud Control Matrix Webinar Series: Implementation Guidelines and Virtual AI Summit 2025, and discussed the progress and future plans related to Zero Trust and AI. He also mentioned the progress of a paper submitted for peer review, focusing on the data lifecycle and cybersecurity, and encouraged contributions and reviews from the group. Lastly, he and Jeremy discussed the progress of a project, with Alex suggesting that Jeremy could contribute by reviewing and providing feedback.

CCM Webinar Series and Upcoming Events:

• Alex announced that the CCM Webinar series will continue for the remainder of the year, providing on-demand content for implementation guidelines. He also mentioned that a Virtual AI Summit will take place on January 29th and 30th, serving as a follow-up to the October event. Alex reminded the team that past events, such as the Zero Trust Summit and the AI Symposium, are available for viewing from past events. He also mentioned the light release of new research publications from CSA in the last couple of weeks, with papers related to Zero Trust and AI currently in peer review.

Paper Progress and Proposed Documents:

• Alex discussed the progress of a paper submitted for peer review, focusing on the data lifecycle and cybersecurity. He mentioned that the paper is still open for internal development and contributions. Alex also mentioned two other proposed documents, one on privacy-enhancing technologies and another on PII in LLMs, and encouraged any contributions or reviews from the group. Jeremy agreed to review the paper and sync with internal people for potential additions. Alex also mentioned the possibility of turning these documents into blog posts. He concluded that the current focus is on the paper going into peer review to be exposed to a wider audience who can further develop the paper by the end of the year. 

------------------------------
Alex Kaluza
Research Analyst
Cloud Security Alliance
------------------------------