Dear members,
Our working group call didn't take place on the 23rd of March due to low response from the participants.
Below you can find the action items from that day and the new ones for our upcoming call on this Thursday on the 6th of April. **Please note: The document has never seemed this close to finalization, so please make sure to complete your last pending actions. ***If anyone does not have time for their action items or a volunteer wants to help with the remaining pending items, Please let me know!
Previous action items:
- Eric to fill in columns I and J for the SI-10 (3) sub-control. Column J for SI-10 and SI-10 (4). - PENDING
- Eric to fill in the Implementation detail (column G) for the SI-17 sub-control. - PENDING
- Eric to fill in column J of the Shared Responsibility in the AU category. Specifically, for sub-control: AU-1 to AU-3 (1) and AU-6, AU-6 (3), AU-6 (7), AU-7, AU11- AU-12. - PENDING
- Robert to please fill in column J (Responsibility) to the AT category. - DONE
- Vishwas to fill in column J of the Shared Responsibility in the CA category. - Partially PENDING
- Joseph to fill in column J (Responsibility) of the CM category. - One PENDING
- Joseph to review and comment the N/A sub-controls of the IA category. - PENDING
- Rajiv to fill in column J (Responsibility) for the RA category. - One PENDING
- Vishwas to fill in column J (Shared Responsibility) in the SC category. Specifically for sub-controls: SC-1, SC-2, SC-5 to SC-8, SC-10X, SC-12,SC-13, SC-16, SC-17, SC-20(X), SC-21(X), SC-23, SC-25X, SC-28, SC-38, SC-44, SC-46. - DONE
- Working group to discuss and decide whether IA-5 (1) is in scope or out of scope since this sub-control is considered Organizational and the policy should be system wide and generic. - PENDING
Next action items:
- Eric ( @Eric Peeters) to fill in columns I and J for the SI-10 (3) sub-control. Column J for SI-10 and SI-10 (4).
- Eric ( @Eric Peeters) to fill in the Implementation detail (column G) for the SI-17 sub-control.
- Eric ( @Eric Peeters) to fill in column J of the Shared Responsibility in the AU category. Specifically, for sub-control: AU-1 to AU-3 (1) and AU-6, AU-6 (3), AU-6 (7), AU-7, AU11- AU-12.
- Vishwas ( @Vishwas Manral) to fill in column J of the Shared Responsibility for the CA-3 and CA-8 sub-controls.
- Joseph ( @Joseph Arcelo) to fill in column J (Responsibility) of the CM-8 sub-control.
- Joseph ( @Joseph Arcelo) to review and comment the N/A sub-controls of the IA category. All new N/A are highlighted in yellow.
- Rajiv ( @Rajiv Gunja) to fill in column J (Responsibility) for the RA-05 sub-control.
- Working group to discuss and decide whether IA-5 (1) is in scope or out of scope since this sub-control is considered Organizational and the policy should be system wide and generic.
Next working group call: Thursday, 6 April.
Time: 09:00 a.m. PST / 12:00 p.m EST / 17:00 GMT / 19:00 EET
URL: https://zoom.us/j/98681420926 (Meeting ID: 986 8142 0926)
Kind regards,
Marina
------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------