Minutes from the ISC Meeting April 21, 2022Attendees:
John DiMaria
Claude Baudoin
Eric Hibbard
Jim Angle
Andreas Fuchsberger
Eleftherios Skoutaris
Willy Fabritius
Steven Woodward
ISO/IEC 27001 AMD will be turned into a full new version of the standard (ISO/IEC 27001:2022). It is expected to be released around August to October timeframe. As this project progresses, we will update.
There are many ISO standards that use ISO/IEC 27002 or reference it. These standards will have to be updated. Eric Hibbard has compiled an initial list and will update it as time goes on. It is not clear how these different working groups will handle the updating process or when. Also as the editor of ISO/IEC 27029, a formal list of standards that need to be reviewed is being complied.
SC27 WG is beginning work of Confidential Computing
ISO/IEC 27034-4 (Application Security) was cancelled in the FDIS stage
There is an opportunity to issue questions for the upcoming WG1 Ad Hoc meeting to be held in May around auditing the SOA during 27k engagements. A couple of questions discussed were around how to measure the effectiveness and how to make it more valuable.
SC38 – 22123 (Vocabulary that will replace 17788 and 17799) is now under ballot.
- The possible IEEE/ISO collaboration on Zero Trust
Possible opportunity to triple brand a standard built around Zero Trust. This is being discussed with the CSA Zero trust WG.
SC27 Liaison report has been drafted and will be submitted to the committee (attached in ISC library). Last report issued was in 2018. It is critical to submit these reports in order to keep CSA relevant and show our interest being involved in key standards.
- Final Approval of Charter
The 2022 ISC Charter is now complete and approved (attached in ISC library). John DiMaria will enter a ticket to have the old one replaced.
Next meeting will be Thursday May 19th
------------------------------
JOHN DIMARIA
ME
CSA
[email protected]------------------------------