Dear members,
On the call on the 29th of July the working group specified that:
- The Implementation of the NIST 800-53 controls to Serverless is done from the perspective of the TENANT. Hence, when a sub-control is not relevant it means that it is not relevant to the tenant.
- Need to add another column to the spreadsheet and define where a control is to be deployed.
- For the 2nd phase of our activity then, we will implement the controls form the CSP's perspective.
- DEADLINE for this 1st phase will be the end of Q3: September 2022.
Next working group
call: Friday, 12 August, at 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 18:00 CET.
url: https://zoom.us/j/98681420926 (
Meeting ID: 986 8142 0926)
Kind regards,
Marina------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------