Zero Trust Architecture (ZTA) Expert Group

Back to discussions
Expand all | Collapse all

ZTA Expert Group Meeting Minutes 7/12

  • 1.  ZTA Expert Group Meeting Minutes 7/12

    Posted Jul 13, 2022 01:23:00 PM

    Hello all,

    Thank you for the thoughtful discussion yesterday. The meeting minutes have been updated and can be found here: https://drive.google.com/drive/folders/1fc9g7vUEuDA3qLDLk-0xoH12e_ZHRkA8 

    The recording for this meeting and future meetings can be found in the Library of the ZTA SME Circle group, along with the agendas/ meeting minutes, and other relevant ZTA artifacts, such as the charter. The Circle group is invite-only, so if you do not have access to this group, please let us know ASAP and we can get that resolved. 

    All Modules for the ZTA Training as well as the ZTA Glossary can be found here: https://drive.google.com/drive/folders/1RRq8MTFh19NCxw8bf5FH8Qito31mEC3F?usp=sharing

    Note: The SDP_Architecture_Guide pdf is attached below and please find the SDP Spec 2 link below. Please read both artifacts as well as modules 1-5 to get a good concept of the ZTA/SDP training.

    SDP Spec v2 Published: can be found here:https://cloudsecurityalliance.org/artifacts/software-defined-perimeter-zero-trust-specification-v2/

    ZTA/ZT/SDP Resources Folder: https://drive.google.com/drive/folders/10MWGbKutdSLYcCkC1IAMSJVO6apBXp4R?usp=sharing

    Action Points (APs):

    1.  Assigned to all, please review Module 5 (new draft) and provide comments/feedback by 7/19. 

      1. Link:https://docs.google.com/document/d/1d244goX54tGXbp22At_YPNEHn4kGLILQhTHE6g3Z0hA/edit?usp=sharing

    2. Module 5 (New Draft- v2)

      1. 5.1 Planning Considerations

        1. Robert Morris was assigned to address "compliance" and flesh it out by 7/19.

        2. Robert Morris, please work on "Define The Future States" and flesh it out by 7/19. 

        3. Alex Sharpe, Sky, and Mark Schlicting were assigned to work on this section and subsections by 7/14.

          1. Please go through what already exists, and decide what to use. 

      2. 5.2 Scope & Priority

        1. Emilio was assigned to work on this section and subsections by 7/14

        2. Use Cases Examples

          1. Shruti was assigned to work on this subsection by 7/14.

      3. 5.3 Protect Surface

        1. Shruti, Sky, and Mark Schlicting were assigned to work on this section and subsections by 7/14. 

          1. Please go through what already exists, and decide what to use. 

      4. 5.4 Map Transaction Flow

        1. Sky and Mark Schlicting were assigned to work on this section and subsections by 7/14.

          1. Please go through what already exists, and decide what to use.

      5. 5.5 Define the PEP Policies

        1. Prasad was assigned to work on this section and subsections by 7/14. 

          1. Please go through what already exists, and decide what to use.

      6. 5.6 Develop the Conceptual Architecture

        1. Michael Herndon and Clement were assigned to work on this section and subsections by 7/14.

          1. Please go through what already exists, and decide what to use.

      7. 5.7 ZTA Production Readiness Planning: Monitor & Maintain

        1. Sanjeev was assigned to work on this section and subsections by 7/14.

          1. Please go through what already exists, and decide what to use.

      8. 5.8 Planning for Application Release & DevOps Secure Remote Access

        1. Matt Lee and Alex Sharpe were assigned to work on this section and subsections by 7/14.

        2. Farid was assigned to work on this section and provide some content by 7/19.



    ------------------------------
    Reza Safari
    Training administration intern
    CSA
    ------------------------------