Privacy Level Agreement

Meeting Minutes June 18th+Reminder of Tomorrow's WG Call

  • 1.  Meeting Minutes June 18th+Reminder of Tomorrow's WG Call

    Posted Jul 01, 2024 05:37:00 AM

    Dear members,

    Below you can find the meting minutes from the PLA working group call of June 18th and the reminder for tomorrow's PLA working group call.

    Previous action items:

    Update on new working group initiative on 'Mapping of the CSA Code of Conduct to the EU Cloud Code of Conduct' online document. The group members are called to work on the mapping in the 3rd Tab called 'PLA CoP v EUCloud COC' . (The first 2 tabs are for consulting). Row 8 can be used as an example.

    • Isabella to review the CSA code of conduct to identify any potential gaps with the 5.1.D row 7, of EU cloud code of conduct. - DONE
    • Louis to map rows 26-35. - DONE
    • Marina to map rows 36-45.- PENDING
    • Marina to review the identified gaps in the CSA and WP 3.0 controls and provide feedback to Jacopo Dirutigliano. - PENDING
    • Kathie to fill rows 21 to 25. - PENDING. (rows will be given to another member)

    New action items:

    Description of task: 'Mapping of the CSA Code of Conduct to the EU Cloud Code of Conduct' online document:
    The group members are called to work on the mapping in the 3rd Tab called 'PLA CoP v EUCloud COC'
    Column C contains the provision/control form the EU Code of Conduct while Column F will need to be filled with the corresponding provision from the CSA Code of Conduct.
    Column H needs to be filled with the values of  No Gap, Partial Gap or Full Gap, depending on the overlap the 2 Code of Conducts may or may not have. In the case of no gap, no amendment will be necessary from the CSP to the already implemented provision. In the case of 'partial or full gap', the CSP will need to amend the already implemented CSA CoC provision to match the EU CoC benchmark.

    • Marina to map rows 36-45.
    • Marina to review the identified gaps in the CSA and WP 3.0 controls and provide feedback to Jacopo Dirutigliano.
    • Louis ( @Louis Pinault) to map rows 46-56.

    The EU Cloud Code of Conduct can be downloaded/consulted here.
    The CSA Code of Conduct is in tab
    'PLA Code of Practice (CoP) v4.1' here.

    Next working group call:

    Date: July 2nd

    Time: 08:00 am. PT / 11:00 .m. ET / 15:00 GMT

    URL: https://cloudsecurityalliance.zoom.us/j/82987382695?pwd=amZ6cEljSCtXVU01OUVRbUUyTTNRdz09  (Meeting ID: 829 8738 2695, Passcode: 794440)

    Kind regards,
    Marina



    ------------------------------
    Marina Bregkou,
    Senior Research Analyst,
    CSA
    ------------------------------