Cloud Key Management

Dear members,

Below you can find the meeting minutes from our working group call on the 7th of February.

Minutes:

• The team discussed the 'best practices for migrating data to the public cloud' document, deciding to focus on key management during the migration process.
• They agreed to limit the document length to 6 pages and implement better structure and formatting suggestions.
• The team also discussed assigning reviewers once the content is fully developed. 
  
• The HSM document, is delayed due to pending action items and the document's publication has been postponed now to March. 
• Jim Scardelis agreed to help with the diagrams that need update.
  
  • Best Practices managing keys when uploading on-prem data to the (public) cloud:
    Sunil Arora raised concerns about the structure and formatting of their document, suggesting the inclusion of headings and bullet points for better readability. The team agreed to implement this suggestion. They decided to also monitor the length of the document and make necessary adjustments if needed to avoid exceeding the page limit.
  •  Post-Quantum Cryptography Key  Management with procedural steps on crypto-migration:
    Iain Beveridge discussed the evolution of cryptographic algorithms and highlighted the need to plan for migration to post-quantum algorithms. He emphasized the importance of understanding current cryptographic assets and the impact on classical algorithms. Iain also mentioned the need for testing and planning in different environments before deploying post-quantum algorithms.

Previous action items: 

• Jim to update Diagram 1: Debit PIN Translation Flow, page 13 and Diagram 2: Credit Card Transaction Flow, page 15, in the HSM document. - PENDING
  
• Marina to ask the Quantum working group to review the table of content of the Post-Quantum Cryptography Key  Management with procedural steps on crypto-migration and check if they have worked or plan to work on a similar topic- DONE
• Best Practices when Uploading On-Prem Data to the Cloud: To expand the scope to include the lifecycle of the data once it is in the cloud. - PENDING

New action items:

• Jim ( @Jim Scardelis) to update Diagram 1: Debit PIN Translation Flow, page 13 and Diagram 2: Credit Card Transaction Flow, page 15, in the HSM document
• Best Practices when Uploading On-Prem Data to the Cloud:
  • Authors:
    • Data preparation and Security - Sunil Arora ( @Sunil Arora)
    • Migration Execution and Management - Sunil Arora ( @Sunil Arora)
      
    • Transition and Optimisation - Leads: Santosh Bompally and Rajat Dubey

      • A: Cutover Planning and Execution - Santosh Bompally ( @Santosh Bompally)

        • Minimizing business disruption during transition - Santosh ( @Santosh Bompally)

        • Rollback plan and disaster recovery procedures - Yuvaraj ( @Yuvaraj Madheswaran) and Bobie ( @Deligent Bobie-Ansah)
      • B: Performance monitoring and cost optimization - Rajat ( @Rajat Dubey)
        • Continuous improvement and adaptation - Yuvaraj ( @Yuvaraj Madheswaran)
      • C:  Data Security in Cloud Environment - Subho Goswami
      • 4.1 Tools and Techniques for Data Transfer - @Michael Roza and @Santosh Bompally

Next working group call: 21 February 2024

Time: 09:00 a.m. PT / 12:00 p.m. ET / 17:00 GMT / 19:00 EET

URL: https://zoom.us/j/93617880747  (Meeting ID: 936 1788 0747)

Warm regards,

Marina

------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------