Hi Morozumi,
Certainly, the work that Marina and the serverless WG are doing is going to be taken into account in the near future by the CCM WG, especially in context of CCM V4.0 update, and its transition planning to V 4.1.
The "FaaS Serverless Control Framework (Set)" of controls needs to be reviewed first by the CCM WG and its co-chairs in order to make the determination of whether such controls are to be included in CCM, and if yes, whether they are to become part of the CCM core controls or their corresponding implementation guidelines.
Please stay tuned for future announcements, an exciting year is ahead of us!
------------------------------
Eleftherios Skoutaris
Program Manager
Cloud Security Alliance
------------------------------
Original Message:
Sent: Mar 29, 2023 11:42:27 AM
From: Marina Bregkou
Subject: CCM for serverless
Hello Morozumi,
When it is finished the plan is for the FaaS controls to be included into the CCM.
We are at the final steps of completing our initiative and soon it will be out for peer review comments on the CSA website.
Please keep an eye for it as we would appreciate as many feedback as possible.
Kind regards,
Marina
------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
Original Message:
Sent: Mar 28, 2023 05:52:48 PM
From: Masahiro Morozumi
Subject: CCM for serverless
Hi,
Serverless WG is creating controls for serverless, which is "FaaS Serverless Control Framework (Set) based on NIST 800-53 R5 controls".
Is there any plan to create serverless controls into CCM?
Regards,
- Morozumi
------------------------------
Masahiro Morozumi
Director
CSA Japan Chapter
------------------------------