Serverless

Dear members,

Please find the meeting minutes and action items from our working group call on August the 12th.

Regarding the Serverless implemantation of NIST 800-53 controls document:

• Organization wide controls: being not specific to serverless, please mention in column G (Implementation details) that these controls are covered as part of the global controls.
• In column I will be filled in the deployment of the controls (pipeline, runtime detection, admission controller, etc.). A new tab in the document contains the definitions for these terms.
• Please have finalized columns G and H ('Implementation details' and 'Why relevant' respectively) for all categories, by this Friday, August the 25th.
• Authors that have finalized column G and H, please work on column I.
• New authors have signed up to divide work with existing authors and complete task.
  • Authors as signed per control category:
    • AC: Access Control - @Brynna Nery and @Christopher Wall, Reviewer: @Joseph Arcelo
    • AT: Awareness and Training - @Robert Ficcaglia and @Sedat Salman
    • AU: Audit and Accountability - @Eric Peeters 
    • CA: Assessment, Authorization and Monitoring - @Vishwas Manral , Reviewer: @Vrettos Moulos
    • CM: Configuration Management - @Joseph Arcelo , Reviewer: @Rajiv Gunja and @Vrettos Moulos
    • IA: Identification and Authentication - @Vani Murthy , Reviewer: @Tom Koval
    • RA: Risk Assessment - @Crystal Cuneo and @Wayne Anderson 
    • SA: Systems and Services Acquisition - @Montressa Wesson
    • SC: System and Communications Protection - @Vishwas Manral , Reviewer: @Christopher Wall
    • SI: System and Information Integrity - @Eric Peeters and @Aradhna Chetal

Next working group call: Friday, 26 August, 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 18:00 CET
https://zoom.us/j/98681420926  (Meeting ID: 986 8142 0926)

Kind regards,

Marina

​​​​​​​​​​​​​​​

​​​​​​

------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------