Dear members,
The Cloud Security Alliance is pleased to announce its collaboration with the ENX Association in the automotive industry, an association of European vehicle manufacturers, suppliers and organizations.
Objective.
The objective of the partnership between CSA and ENX is to de-risk cloud environments in the automotive sector and ensure that vendors/organizations in the automotive industry enrich their cloud security baselines through strategic collaboration in developing and validating cloud security controls.
Mapping Project.
Our partnership with ENX entails a joint mapping and gap analysis activity between the CSA's CCM V4.0 and ENX's ISA V6 standard. In this way, an opportunity is provided to organizations in the automotive industry to identify the overlapping security requirements between the two frameworks and, more importantly, the missing cloud-specific CCM security requirements (deltas) in ISA, hence more efficiently streamlining cloud security controls integration within their cloud security and compliance programs.
Project Duration.
The project is expected to last from 3-5 months.
SMEs are expected to dedicate 2-3 hrs / week.
Call for Experts.
The CSA, and under the umbrella of the CCM WG, would like to put together a team of experts to drive the mapping project, who satisfy the following criteria:
- Have good knowledge/experience in the implementation and/or assessment of CCMv4 controls
- Are familiar with control frameworks' mappings (knowledge of CCM WG mapping methodology is a plus
- Are passionate about cyber/cloud security and are eager to learn new things, commit and support this project
Project Contact.
Should you be interested in participating in this project, consider replying directly to this message (or contact the CCM WG PM at [email protected]). Will then walk you through the on-boarding process and mapping methodology.
Kick-Off.
Please consider joining our CCM WG call of next week, on Wednesday the 13th, where we are going to discuss the project's specifics and onboard experts to the alignment/mapping activity (see 'Events' for call info).
------------------------------
[Lefteris] [Skoutaris]
[Cloud Controls Matrix, Program Manager]
[Cloud Security Alliance]
------------------------------