International Standardization Council

Attendees:

John DiMaria Claude Baudoin Rachelle Summers  Eric Hibbard (Samsung) Keith Stocks Andreas Fuchsberger Peter Dickman

• Approve last month's minutes
  • Approved. No Changes

• Cover any action items
  • TR 3445 Information technology – Cloud computing – Audit of cloud
    services - Eric provided a copy as per the past action. John and Eric will discuss the process of submitting a proposal to consider making this a guidance document.
• Recap a busy 2022 and highlights, discuss objectives for our group, and look into the crystal ball for an exciting 2023.
  • ISO/IEC 27001:2022 release was the biggest item in 2022.
  • The OMG meetings took place in Austin Tx last week as well as virtual. Two position papers were released.
• Interop and Portability final public version: https://www.omg.org/cgi-bin/doc?mars/22-12-13.pdf
• Template for Cloud Svc Agreement: https://www.omg.org/cgi-bin/doc?mars/22-12-14.pdf
  
  Everyone is encouraged to review and comment. John DiMaria is following upwith CSA Research to see if they have any input to the Template for Cloud Svc Agreement.

• 27006-1 (WG5) DIS Ballot closed. Passed at 91% Expected release June 2023
• 27006-2 - On its 2nd CD. Expect this release is about one year out
• 27701 - DIS Ballot starts 01-04-2023 - 03-29-2023 - Expected publish date Mid Summer
• 22123 -1 in its final ballot  the - 2 is in DIS and in comment period. -3 DIS Ballot is closed Suspect next actions 3rd week in January
• 27018 - Will decide on a possible major revision April 2023 - 12 week ballot
• Expect to see a PWI to review the entire ISO/IEC 27001 program and structure. CSA should be very much involved in this as it is expected that major restructuring will be proposed, including the possible removal of Annex A
•  Next meeting scheduled for Thursday January 19th

Wishing everyone a great holiday season. Be safe and be well.

​

------------------------------
JOHN DIMARIA
ME
CSA
[email protected]
------------------------------