Serverless

Back to discussions
Expand all | Collapse all

Meeting Minutes 6th April+Reminder 4 tomorrow's call!

  • 1.  Meeting Minutes 6th April+Reminder 4 tomorrow's call!

    Posted Apr 20, 2023 01:19:00 PM

    Dear members,

    Below is a summary of the WG call that took place on the 6th of April.

    This is to serve also as a kind reminder of tomorrow's Serverless call, scheduled for 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 19:00 EET.

    **Please note: The document is close to finalization, so please make sure to complete your last pending actions.
    ***If anyone does not have time for their action items or a volunteer wants to help with the remaining pending items, Please let me know!

    Discussion:

    • We went through the document 'NIST controls implementation to Serverless FaaS' and remaining pending action items.
    • The members noted that if 'Responsibility' (column J) falls under CSP, the control should be checked again, in order to make sure that is not to be marked as N/A to FaaS.

    Previous action items:

    • Eric to fill in columns I and J for the SI-10 (3) sub-control. Column J for SI-10 and SI-10 (4). - DONE
    • Eric to fill in the Implementation detail (column G) for the SI-17 sub-control. - DONE
    • Eric to fill in column J of the Shared Responsibility in the AU category. Specifically, for sub-control: AU-1 to AU-3 (1) and AU-6, AU-6 (3), AU-6 (7), AU-7, AU-11- AU-12. - PENDING
    • Vishwas to fill in column J of the Shared Responsibility for the CA-3 and CA-8 sub-controls. - DONE
    • Joseph to fill in column J (Responsibility) of the CM-8 sub-control. - PENDING
    • Joseph to review and comment the N/A sub-controls of the IA category. All new N/A are highlighted in yellow. - DONE (by Wayne Anderson)
    • Rajiv to fill in column J (Responsibility) for the RA-05 sub-control. - DONE
    • Working group to discuss and decide whether IA-5 (1) is in scope or out of scope since this sub-control is considered Organizational and the policy should be system wide and generic. - PENDING

    New action items:

    • Vishwas ( @Vishwas Manral) to update SC-10X.
    • Volunteer (instead of Eric Peeters) to help filling in column J of the Shared Responsibility in the AU category. Specifically, for sub-control: AU-1 to AU-3 (1) and AU-6, AU-6 (3), AU-6 (7), AU-7, AU-11- AU-12.
    • Joseph ( @Joseph Arcelo) / volunteer to fill in column J (Responsibility) of the CM-8 sub-control.
    • Working group to discuss and decide whether IA-5 (1) is in scope or out of scope since this sub-control is considered Organizational and the policy should be system wide and generic.
    • Working group to verify comments by Wayne Anderson to the N/A sub-controls of the IA category. All new N/A are highlighted in yellow

    Our next working group call is scheduled for tomorrow, Friday 21st April, at 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 19:00 EET.
    To connect on the call, please click URL: https://zoom.us/j/98681420926  (Meeting ID: 986 8142 0926)

    Kind regards,
    Marina



    ------------------------------
    Marina Bregkou,
    Senior Research Analyst,
    CSA
    ------------------------------