As Jason indicated in his notes from the prior 2/23 call, he cleaned up the rough draft "business value notes" document and assembled a draft outline for the group to review.
There was an excellent ZT WG informational presentation on 3/3 related to business value of ZT. This is the recording link: Business Value of Zero Trust & How to Influence for Buy-In (3/3/23). It's a very good resource for this WG, esp. for document authors and anyone else interested in the business value conversation.
The workgroup met again on 3/9 and reviewed and refined the outline of the draft "Communicating Business Value of Zero Trust" guidance document deliverable. ZT9 BizVal folder link. The entire ZT workstream and the ZT workgroup leadership team have Commenter access to the document. Folks that volunteered to be lead authors for specific sections have been upgraded to Editor (Contributor) access. New volunteer authors should add a comment to the specific sections they'd like to take ownership of and we'll upgrade their permissions accordingly.
Meeting recording link: https://cloudsecurityalliance.zoom.us/rec/share/8FYuOUCCcKoNKddBis5WbfhDw0hzgqkDs8N2ZQ1rw9-1rvMOVx3eFTKaIHlUAN2w.SH3TuapjXRHkoMJr
The business value deliverable was very favorably received by the ZTAC Exec Steering Group and is a top priority deliverable for the CSA ZT WG. This document is listed as one of the Common CSA ZT Workgroup Deliverables that all workstreams should be aware of and are encouraged to contribute to. Another such ZT9 deliverable is the Zero Trust Implementation Primer: The 5-Step Methodology that we're spinning off a small focus group to help draft in parallel with the business value document.
------------------------------
Erik Johnson CCSK, CCSP, CISSP, PMP
Senior Research Analyst
Cloud Security Alliance
[email protected]
------------------------------