Financial Services Industry

Financial Services Meeting Minutes 4/22/20

• Intro
• Introduction of Financial Services and other CSA working groups.
  • https://cloudsecurityalliance.org/covid-19 to find the latest response from CSA.
• Explanation of Circle platform, how to join FSSP community and contribute.
  • https://circle.cloudsecurityalliance.org/home 

• CSA Events Calendar
• CSA Cloudbytes Connect (May 26, 2020-May 28, 2020)
  • https://web.cvent.com/event/356caa07-5b61-4592-a600-06e37119d1ac/summary
• New tentative date for Federal Summit (June 25, Washington DC)
  

• Release Documents Overview
  • Cloud Usage in the Financial Services Sector (Released: February 21, 2020)
    • Blog/Press Release: https://cloudsecurityalliance.org/artifacts/cloud-usage-in-the-financial-services-sector/ 
  • Cloud Octagon Model for Risk Assessment in the Cloud (Released: June 24, 2019)
    • Blog/Press Release: https://cloudsecurityalliance.org/press-releases/2020/02/24/csa-continues-to-drive-leadership-in-cloud-security-with-new-research/
     

• Guest Speaker: Juan Perez-Etchegoyen
  • Chief Technical Officer of Onapsis
  • Co-Chair of the ERP Security Working Group
  • What is the ERP WG (history and past initiatives)?
  • How ERP fits into Financials?
  • Call for Action

• FSSP Charter 2020/21 (In Progress)
  • https://docs.google.com/document/d/1G7UQlIklUXppr_e1I_BqmycN5v1wuUwfL4Ug05C-Occ/

• FSSP Potential Initiatives
  • Serverless security
  • SaaS governance
  • Security & compliance dashboards for devops teams on AWS/Azure
  • Vulnerability Assessments and Monitoring
  • CASB
  • Azure AD vs on prem AD. How to integrate, which is leading, IDP
  • Cloud vendor management, third party risk management
  • Blockchain for financial services
  • A DLT Security Framework for the Financial Services Sector
  • Cloud Connected Security Breaches
  • Container Governance and Security in the Cloud

• Next Meeting
• Wednesday, May 27th at 8 AM PT

------------------------------
Alex Kaluza
Research Coordinator/ FSSP Research Analyst
Cloud Security Alliance
------------------------------