Serverless

Dear members,

This is a kind reminder for tomorrow's Serverless working group call.

Previous action items:

• Rajiv ( @Rajiv Gunja) to vote on CM-6, CM-7 and CM-8, in lines 81-82. - DONE
• Rajiv ( @Rajiv Gunja) to review and vote on CM-13, after Joseph's latest update. - DONE
• Joseph ( @Joseph Arcelo) to help Rajiv with vote in CM 14. - DONE
• Joseph ( @Joseph Arcelo) to justify why the CM-11 sub-control is not relevant to FaaS. - PENDING
  
• Christopher ( @Christopher Wall) to review and vote on remaining sub-controls: SC-3X, SC-46X,  of the SC category. - PENDING
• Vishwas ( @Vishwas Manral) to help Christopher on SC-17X implementation voting. - DONE
• Vishwas ( @Vishwas Manral) to review and vote the CM category. Lines 75-88 - PENDING
  
• Aradhna ( @Aradhna Chetal) to review and vote on the details of the SI: System and Information Integrity control category entered by Eric Peeters. SI- 2 (3), SI-4 (9), SI-4 (11) to SI-4 (13), SI-4 (15) to SI-4 (25), SI-5 (1), SI7, SI-8, SI-10, SI-10 (5), SI-10 (6), SI-12 (1) to SI-14 (3), SI-17, SI-18 (2), SI-18 (4), SI-19, SI-19 (1), SI-19 (5) to SI-23. - PENDING
  
• Eric ( @Eric Peeters), to update the SI - 2 (6) sub-control accordingly to Aradhna's comment if he agrees. The same for SI-3, SI-4, SI-4 (1) to SI-4 (3), SI-4 (5), SI-4 (7), SI-4 (10), SI-4 (14), SI-5, SI-6, SI-10 (1) to SI-10 (4), SI-11. - PENDING
  
• Eric ( @Eric Peeters) to justify why the sub-control AU-6 (1), AU-6 (8) is not relevant (N/A) to FaaS.- DONE
• Brynna ( @Brynna Nery) to update sub-control AC-10, line 15 and turn it from N/A to FaaS relevant. - PENDING
• Brynna ( @Brynna Nery) to update column G, for all N/A sub-controls in the AC category. - PENDING
• Robert ( @Robert Ficcaglia) to review and vote on SA category. Lines 119-134. - DONE
• Karthik ( @Karthik Kaligotla) and Arvin ( @Arvin Reddy Jakkamreddy) to check Robert's comments in the SA category and update accordingly or discuss further in the slack channel. - PENDING
• Group to discuss and vote on IA-1. - DONE

New action items from the November 4th call:

• Joseph ( @Joseph Arcelo) to justify why the CM-11 sub-control is not relevant to FaaS. -
• Christopher ( @Christopher Wall) to review and vote on remaining sub-controls: SC-3X, SC-46X,  of the SC category.
• Vishwas ( @Vishwas Manral) to review and vote the CM category. Lines 75-88
• Aradhna ( @Aradhna Chetal) to review and vote on the details of the SI: System and Information Integrity control category entered by Eric Peeters. SI- 2 (3), SI-4 (9), SI-4 (11) to SI-4 (13), SI-4 (15) to SI-4 (25), SI-5 (1), SI7, SI-8, SI-10, SI-10 (5), SI-10 (6), SI-12 (1) to SI-14 (3), SI-17, SI-18 (2), SI-18 (4), SI-19, SI-19 (1), SI-19 (5) to SI-23.
  
• Eric ( @Eric Peeters), to update the SI - 2 (6) sub-control accordingly to Aradhna's comment if he agrees. The same for SI-3, SI-4, SI-4 (1) to SI-4 (3), SI-4 (5), SI-4 (7), SI-4 (10), SI-4 (14), SI-5, SI-6, SI-10 (1) to SI-10 (4), SI-11.
• Brynna ( @Brynna Nery) to update sub-control AC-10, line 15 and turn it from N/A to FaaS relevant.
• Brynna ( @Brynna Nery) to update column G, for all N/A sub-controls in the AC category. 
• Karthik ( @Karthik Kaligotla) and Arvin ( @Arvin Reddy Jakkamreddy) to check Robert's comments in the SA category and update accordingly or discuss further in the slack channel. Please update SA-4 - Imlementation details for FaaS, SA-9 to Out of Scope as discussed on the previous call. SA-9 (4): Please specify the geographical considerations so that to support this is in scope, SA-9(7) please check comment from Robert, SA-9(8) justify why it is out of scope.

Next working group call: Friday, 18th November, at 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 18:00 CET.
url: https://zoom.us/j/98681420926  (Meeting ID: 986 8142 0926)

Kind regards,
Marina

------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------