Financial Services Industry

Financial Services Meeting Minutes 5/27/20

• Intro
• Introduction of Financial Services and other CSA working groups.
  • https://cloudsecurityalliance.org/covid-19 to find the latest response from CSA.

• CSA Events Calendar
• CSA Cloudbytes Connect (May 26, 2020-May 28, 2020)
  • https://web.cvent.com/event/356caa07-5b61-4592-a600-06e37119d1ac/summary
• FSSP Charter in peer Review (until 5/31)
  
  • https://docs.google.com/document/d/1G7UQlIklUXppr_e1I_BqmycN5v1wuUwfL4Ug05C-Occ
• CSA EMEA Virtual Event (June 9-12th)
  
• CSA Cloudbytes Connect (July) - Have a speaker from the FSSP working group present?
• SECtember (September) - Have a speaker from the FSSP working group present?

• Release Documents Overview
  • Cloud Usage in the Financial Services Sector (Released: February 21, 2020)
    • Blog/Press Release: https://cloudsecurityalliance.org/artifacts/cloud-usage-in-the-financial-services-sector/ 
      
       

• Guest Speaker: Sean Heide - CSA Research Analyst for DevSecOps WG
  • Six Pillars of DevSecOps Overview
    • Sean gave an overview of the Six Pillars of DevSecOps release, and what pillars have been focused on by the group so far. He is planning one of the authors of the automation paper to speak at next month's FSSP meeting, and asked the group to think about more technical questions regarding DevSecOps for them.
  • https://cloudsecurityalliance.org/press-releases/2019/08/09/csa-releases-the-six-pillars-of-devsecops-report

• Proposed Initiatives
  • Security & compliance dashboards for devops teams on AWS/Azure
    • DevSecOps - Bring security tools and practices to DevOps
    • Does your organisation use cloud native security and compliance dashboards?
    • Do you offer training to your devops teams on how to use those dashboards?

• • Blockchain for Financial Services
    • A DLT Security Framework for the Financial Services Sector.
    • Examples: Smart Cities, Finance, Cryptocurrency, Eliminate paper transaction.
    • What are the challenges in risk assessments in blockchain?
  • Serverless Security
    • How do you secure FaaS?
    • How do you implement IAM?

• Next Meeting
• Wednesday, June 24th at 8 AM PT

------------------------------
Alex Kaluza
Research Coordinator
Cloud Security Alliance
------------------------------