Dear members,
Below you can find the meeting minutes from our working group call on the 18th of October.
Minutes:
- The Key Mgmt Lifecycle Best Practices document remains in peer review one more day until the 26th of October.
- During the call we went through some of the feedback that has been already provided through the peer review process in order to show how the authors
Previous action items:
- Sam to update diagram 7: Overview of a simplified Logical Architecture of an HSM, page 34 by adding another box inside "Secure Hardware" for "Virtualization (if Applicable)" which encompasses the bottom four sections (Cryptographic Key Management, Cryptographic Operations, Authentication & Access Control, and Audit & Logging). Jim's suggestion is to make the concentric circle a dashed line instead of solid. - DONE
- Sam to review section 7.2 and section 8. Key Mgmt Considerations. - Partially Pending
- Sam to re-write the intro paragraph in section 6, page 44. - PENDING
- Marina to map the CCM domains to the items of the table of physical and logical controls in page 45, section 6. - In Progress
New action items:
Document: HSM-as-a-Service:
- Sam ( @Sam Pfanstiel) to cross check the content Iain included in page 27, under 3.6 Customs Applications section.
- Sam ( @Sam Pfanstiel) to review the intro paragraph in section 6, page 44.
- Sam ( @Sam Pfanstiel) to review rows in table of page 45 for overlapping physical and logical controls.
- Sam ( @Sam Pfanstiel) to review section 8. Key Mgmt Considerations, page 61.
- Marina to map the CCM domains to the items of the table of physical and logical controls in page 45, section 6.
Next working group call: 1st November
Time: 08:00 a.m. PST / 11:00 a.m. EST / 16:00 GMT / 18:00 EET
URL: https://zoom.us/j/93617880747 (Meeting ID: 936 1788 0747)
Kind regards,
Marina
------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------