Dear members,
Apologies for the late announcement as I have been sick the last week.
Below are the things discussed on our last working group call on the
21st of October along with the assigned action items.
Regarding work on the
NIST Controls Implementation to FaaS document:
Previous action items:
- Wayne ( @Wayne Anderson) to fill in columns G, H, I for sub-control RA-01, row 106. - DONE
- Rajiv ( @Rajiv Gunja) to vote on CM-7 and CM-8, in lines 81-82. - PENDING
- Rajiv ( @Rajiv Gunja) to review and vote on CM-13 and CM 14, after Joseph's latest update. - PENDING
- Christopher ( @Christopher Wall) to update AC-16, column G with the tags comment. Line 19. - DONE
- Christopher ( @Christopher Wall) to review and vote on remaining sub-controls of the SC category. - PENDING
- Vishwas ( @Vishwas Manral) to help Christopher on SC-12, SC-13X and SC-17 implementation. - half DONE
- Vishwas ( @Vishwas Manral) to review and vote the CM category. Lines 75-88. - PENDING
- Aradhna ( @Aradhna Chetal) to review and vote on the details of the SI: System and Information Integrity control category entered by Eric Peeters. - PENDING
- Brynna ( @Brynna Nery) to update sub-control AC-10, line 15 and turn it form N/A to FaaS relevant. - PENDING
- Brynna ( @Brynna Nery) to update column G, for all N/A sub-controls in the AC category. - PENDING
- Joseph ( @Joseph Arcelo) to vote on remaining sub-control from the AC category. Lines 13-17 and 20-27. - DONE
- Karthik ( @Karthik Kaligotla) and Arvin ( @Arvin Reddy Jakkamreddy) to complete column E for the SA category. - DONE
- Eric ( @Eric Peeters) to review the AT category and vote. - DONE
- Robert ( @Robert Ficcaglia) to review and vote on SA category. Lines 119-134. - PENDING
- Vrettos ( @Vrettos Moulos) to fill in the missing entries for the RA category. Lines 106 - 118. - DONE
New action items:
- Rajiv ( @Rajiv Gunja) to vote on CM-6, CM-7 and CM-8, in lines 81-82.
- Rajiv ( @Rajiv Gunja) to review and vote on CM-13, after Joseph's latest update.
- Joseph ( @Joseph Arcelo) to help Rajiv with vote in CM 14.
- Joseph ( @Joseph Arcelo) to justify why the CM-11 sub-control is not relevant to FaaS.
- Christopher ( @Christopher Wall) to review and vote on remaining sub-controls: SC-3X, SC-46X, of the SC category.
- Vishwas ( @Vishwas Manral) to help Christopher on SC-17X implementation voting.
- Vishwas ( @Vishwas Manral) to review and vote the CM category. Lines 75-88
- Aradhna ( @Aradhna Chetal) to review and vote on the details of the SI: System and Information Integrity control category entered by Eric Peeters. SI- 2 (3), SI-4 (9), SI-4 (11) to SI-4 (13), SI-4 (15) to SI-4 (25), SI-5 (1), SI7, SI-8, SI-10, SI-10 (5), SI-10 (6), SI-12 (1) to SI-14 (3), SI-17, SI-18 (2), SI-18 (4), SI-19, SI-19 (1), SI-19 (5) to SI-23.
- Eric ( @Eric Peeters), to update the SI - 2 (6) sub-control accordingly to Aradhna's comment if he agrees. The same for SI-3, SI-4, SI-4 (1) to SI-4 (3), SI-4 (5), SI-4 (7), SI-4 (10), SI-4 (14), SI-5, SI-6, SI-10 (1) to SI-10 (4), SI-11.
- Eric ( @Eric Peeters) to justify why the sub-control AU-6 (1), AU-6 (8) is not relevant (N/A) to FaaS.
- Brynna ( @Brynna Nery) to update sub-control AC-10, line 15 and turn it from N/A to FaaS relevant.
- Brynna ( @Brynna Nery) to update column G, for all N/A sub-controls in the AC category.
- Robert ( @Robert Ficcaglia) to review and vote on SA category. Lines 119-134.
- Karthik ( @Karthik Kaligotla) and Arvin ( @Arvin Reddy Jakkamreddy) to check Robert's comments in the SA category and update accordingly or discuss further in the slack channel.
- Group to discuss and vote on IA-1.
Next working group call: Friday,
4th November, at 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 18:00 CET.
url: https://zoom.us/j/98681420926 (
Meeting ID: 986 8142 0926)
Kind regards,
Marina
------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------