DevSecOps

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Take this survey to indicate what you'd like to write about and your areas of expertise: https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives
    
    

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in a coming survey! - We'll be asking about what you want to write about

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Thank you Hillary for capturing the notes in the detail !!

------------------------------
Sam Sehgal
Architect
Dell Technologies
------------------------------

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Hi Hillary,

I had gotten a notice that this meeting was cancelled? It looks like it was still held? Is there a meeting recording for the July 15th meeting?

------------------------------
Shaun Mckeag
Princ Software Engineer
NortonLifeLock
------------------------------

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Hi Shaun,

Not sure why that would have happened, but yes the meeting was still held. Are the others in the series still on your calendar? There isn't a recording just the notes above. Let me know if you have any other questions.

H

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Original Message:
Sent: Jul 19, 2021 07:55:56 AM
From: Shaun Mckeag
Subject: Meeting Minutes - 15 July

Hi Hillary,

I had gotten a notice that this meeting was cancelled? It looks like it was still held? Is there a meeting recording for the July 15th meeting?

------------------------------
Shaun Mckeag
Princ Software Engineer
NortonLifeLock

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

hi @Hillary Baron: I seem to have lost the series as well. Can you please post the meeting series on this thread? Is it the same as what's in the Events tab for this community (from June 2020)? ​

------------------------------
Sreeni Sharma
Distinguished Engineer
Dell Technologies
------------------------------

Original Message:
Sent: Jul 19, 2021 08:48:15 AM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

Hi Shaun,

Not sure why that would have happened, but yes the meeting was still held. Are the others in the series still on your calendar? There isn't a recording just the notes above. Let me know if you have any other questions.

H

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA

Original Message:
Sent: Jul 19, 2021 07:55:56 AM
From: Shaun Mckeag
Subject: Meeting Minutes - 15 July

Hi Hillary,

I had gotten a notice that this meeting was cancelled? It looks like it was still held? Is there a meeting recording for the July 15th meeting?

------------------------------
Shaun Mckeag
Princ Software Engineer
NortonLifeLock

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Hi @Sreeni Sharma - Here is the link to the meeting series https://cloudsecurityalliance.zoom.us/j/99657213306?pwd=NWI0RW9leDJvVEExcE9JS3hxSEU1dz09   Meetings are every other Thursday at 8am PT.

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Original Message:
Sent: Jul 22, 2021 07:19:26 AM
From: Sreeni Sharma
Subject: Meeting Minutes - 15 July

hi @Hillary Baron: I seem to have lost the series as well. Can you please post the meeting series on this thread? Is it the same as what's in the Events tab for this community (from June 2020)? ​

------------------------------
Sreeni Sharma
Distinguished Engineer
Dell Technologies

Original Message:
Sent: Jul 19, 2021 08:48:15 AM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

Hi Shaun,

Not sure why that would have happened, but yes the meeting was still held. Are the others in the series still on your calendar? There isn't a recording just the notes above. Let me know if you have any other questions.

H

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA

Original Message:
Sent: Jul 19, 2021 07:55:56 AM
From: Shaun Mckeag
Subject: Meeting Minutes - 15 July

Hi Hillary,

I had gotten a notice that this meeting was cancelled? It looks like it was still held? Is there a meeting recording for the July 15th meeting?

------------------------------
Shaun Mckeag
Princ Software Engineer
NortonLifeLock

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------

Thank you, @Hillary Baron!​​

------------------------------
Sreeni Sharma
Distinguished Engineer
Dell Technologies
------------------------------

Original Message:
Sent: Jul 28, 2021 08:34:53 AM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

Hi @Sreeni Sharma - Here is the link to the meeting series https://cloudsecurityalliance.zoom.us/j/99657213306?pwd=NWI0RW9leDJvVEExcE9JS3hxSEU1dz09   Meetings are every other Thursday at 8am PT.

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA

Original Message:
Sent: Jul 22, 2021 07:19:26 AM
From: Sreeni Sharma
Subject: Meeting Minutes - 15 July

hi @Hillary Baron: I seem to have lost the series as well. Can you please post the meeting series on this thread? Is it the same as what's in the Events tab for this community (from June 2020)? ​

------------------------------
Sreeni Sharma
Distinguished Engineer
Dell Technologies

Original Message:
Sent: Jul 19, 2021 08:48:15 AM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

Hi Shaun,

Not sure why that would have happened, but yes the meeting was still held. Are the others in the series still on your calendar? There isn't a recording just the notes above. Let me know if you have any other questions.

H

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA

Original Message:
Sent: Jul 19, 2021 07:55:56 AM
From: Shaun Mckeag
Subject: Meeting Minutes - 15 July

Hi Hillary,

I had gotten a notice that this meeting was cancelled? It looks like it was still held? Is there a meeting recording for the July 15th meeting?

------------------------------
Shaun Mckeag
Princ Software Engineer
NortonLifeLock

Original Message:
Sent: Jul 15, 2021 12:49:50 PM
From: Hillary Baron
Subject: Meeting Minutes - 15 July

• CSA Announcements:
  • Recent document releases:
  • Opportunities to participate in reviews and surveys: https://cloudsecurityalliance.org/research/#_initiatives

• Recap from the Kick-off Call
  • Reviewed the work done so far
  • Defined the new direction
  • Discussed next steps and near term documents (e.g. finishing the pillars documents)
  • View the recording of the kick-off call here:
    • URL: https://cloudsecurityalliance.zoom.us/rec/share/-rLdboXkKeRcc58Ogi2w2WYK6BoF7vSrnEGkOiqdRW7odMt4mjkBdoyTVCy1PiU.heDniVQbgKcD_i41
    • Passcode: e#+uLE2i
    • Slides: https://docs.google.com/presentation/d/1KMRPzVCb1ATicO1TSjoTOQXTwWwoMMJr6RZkPIzaQmY/edit#slide=id.p1
• Documents
  • Review:
    • Pillar 4 - Bridge Compliance and Development document https://docs.google.com/document/d/1NbrOkE4um5lshWFOOAsKrNgRFkb3rnw9CIQRcUVvwyg/edit
  • Write:
    • Pillar 2 - Training & Process Integration https://docs.google.com/document/d/1Rf-qdYMuTd1LvgrS-IrUEX2h1ADk-UmwlQZVUbnQrZE/edit
    • Pillar 3 - Pragmatic Implementation https://docs.google.com/document/d/10n9xEhviBeBWOqW7JBV5tp0sO4_hDxgnLsj_uaEETXk/edit
    • Pillar 6 - Measure, Monitor, Report & Action: https://docs.google.com/document/d/1VO1z-Fv5UdXOetTX8z6MB8RBgfWEBsG9x_w78zIoPSs/edit
• Best Practices for Writing
  
  • Establish a quorum of key writers and establish methods of communication (e.g. weekly calls, email, slack, Circle thread)
  • Start with an outline so you have a roadmap, you can always go back an edit
  • Keep in mind the audience
    • For the pillars
      • Keep it broader than just those who write code
      • But still needs to be technical enough that it's applicable
    • Applied topics - will be more technical and narrow audience
  • Assign sections of the outline to each of writers
  • Add visuals when words fail - CSA graphic designers at CSA can help!
  • Length of the document - see what's already been published
• Ideas for future projects
  • Code (open source) and demos instructions for more hands on opportunities
  • Reference Architecture specifically around security
  • Internal roadmap
• Calls to Action
  • Introduce yourself on this discussion thread and let us know what your areas of interest or expertise are
  • Participate in this survey! https://forms.gle/TyrAN5LtBuYf2UuK7

------------------------------
Hillary Baron CCSK v4
Program Manager, Research
CSA
Seattle WA
------------------------------