Serverless

Dear members,

Minutes form the previous call on 14th of July follow below:

•  Working group went through the 'FaaS Serverless Control Framework (Set) based on NIST 800-53 R5 controls' document past its peer review period!
• Charter document updated with 2023 actions, was sent for publication on the CSA Serverless WG micro-site.
• Working group agreed to take August off and resume work in September with new action items like updating of the 12th most critical risks for Serverless applications document. (What other top threats to Serverless exist. Existing and known attacks/problems, etc.) 

Previous action items:

• Working group to go through and address/resolve all comments done to the FaaS controls Framework document after peer review period passed on 12th of July. - In progress
• Working group to start updating chapter 6 of the Serverless Architecture document after feedback brought in by a volunteer who noticed the Best Practices mention is not a specific section in the document, rather than spread throughout it. Craig suggested to use the NIST (800-30 and 39) document as a source in creating the new 6.6 Serverless Best Practices section. Google version of document, here. - In progress
• Wayne, Vishwas and Robert to create a max. 10 pages presentation (using this template) to go with the FaaS excel document when it is published. - PENDING
• Marina will ask Aradhna's help to identify who will work on the OSCAL version of the FaaS controls framework. - DONE
• Marina to ask the volunteer who offered feedback on the Serverless Architecture document if there is any other expectation or feedback he would like to offer. - DONE
  

New action items:

• Wayne Anderson to create a webinar in order to present and launch the  FaaS controls document.
• Wayne ( @Wayne Anderson) to write section 6.6 Serverless Best Practices from the original 'Serverless Architecture' document published by the working group in 2021.
• Vrettos ( @Vrettos Moulos) to help out Wayne in writing section 6.6 Serverless Best Practices.
• Wayne ( @Wayne Anderson) and Vrettos ( @Vrettos Moulos) to address Rajat's suggestions in section 6.6.
• Wayne ( @Wayne Anderson), Vishwas ( @Vishwas Manral) to create (a max. 10 pages) presentation (using this template) to go with the FaaS excel document for when it is published.
• Wayne ( @Wayne Anderson) to update regarding feedback received by Philip for the FaaS Framework document during per review.

Next Working Group call:
Date: Friday, 28 July 2023
Time: 09:00 a.m. PST / 12:00 p.m. EST / 17:00 GMT / 19:00 EET
URL:  https://zoom.us/j/98681420926  (Meeting ID: 986 8142 0926)

Warm regards,
Marina

------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------