Financial Services Industry

Financial Services Meeting - 7/28/21

• Chapter Events - August, September 2021
  • Investigating Business Email Compromise Attacks
  • Live Simulation of Cloud Misconfiguration Exploits
  • CCSK Training and Certification Guidelines
• SECtember 2021 - In person, September 13^th - 17^th, 2021
• CSA Blog
• CCSK Training 20% Discount
• Lift and Shift Best Practices and Strategy
  • Continued discussion, additional use cases, potentially develop framework, best practices and recommendations, provide benefits, challenges, and recommendations for those following lift and shift strategies.
  • https://docs.google.com/document/d/1SqrtUM5YXtqKUtEHOvIx9_GURoUczoNhC2NeXIL150k/ 
    • The group took notes on key points that should be covered in the lift and shift best practices and strategies paper
    • These notes can be commented on, and additional notes and ideas from the group are welcome
    • Added a table of contents to use as an outline
      
  • “Lift and shift is a strategy for moving an application or operation from one environment to another without stopping to redesign the app or operations workflow. The complexity of an application or operation is a key factor in deciding whether something should be lifted and shifted or re-architected from scratch as a new native cloud app or operation.”
    
  • “Lifting and shifting is often compared to moving a houseplant from one environment to another; being in a different habitat can affect whether the plant will thrive. Likewise, an IT project that started in an on-premises or original legacy system might not work as well in a new location.”
    
• Open Discussion, Q&A
  • Additional questions from today’s content?
    
  • Questions and comments from the previous July meeting with guest speakers Anil and and Aradhna who shared a preview of their upcoming presentation with FFIEC regulators
    
  • Topic ideas for the research publications, initiatives, and upcoming meetings that we haven’t yet covered
    
• Next Zoom Meeting: September 22^nd 8:00 AM PT
  • https://cloudsecurityalliance.zoom.us/j/94151107820
  • No meeting planned for August, September Agenda TBD
  • Will instead be releasing a newsletter recapping the outcomes from the FFIEC presentation, as well as other recent interesting financial industry news
    
• Additional Resources
  • Financial Services research publications from CSA website
  • Participate in Research open peer reviews and surveys on CSA website
  • New Research Lifecycle - 2o Steps to Publication

------------------------------
Alex Kaluza
Research Coordinator
Cloud Security Alliance
------------------------------