Serverless

Agenda:

Update on the 'NIST controls implementation to Serverless' document:

• Our working group now has a slack channel
• Update by all lead authors for column 'H'- Why is it relevant for Serverless.
• Volunteers needed for the cross check of the identified sub-controls and their analysis.
• Volunteer needed for the AT - Awareness and Training control family

Reminder of control families assigned to lead authors:

• AC - Access Control: Brynna ( @Brynna Nery)
• AU - Audit and Accountability ( @Eric Peeters)
• CA - Assessment, Authorization and Monitoring ( @Vishwas Manral)
• CM - Configuration Management ( @Joseph Arcelo)
• IA - Identification and Authentication ( @Vani Murthy), (sub-controls review by @Tim Koval)
• RA- Risk Assessment ( @Rajiv Gunja)
• SA - Systems and Services Acquisition ( @Rajiv Gunja)
• SC - System and Communications Protection ( @Vishwas Manral)
• SI - System and Information Integrity ( @Aradhna Chetal) AND @Eric Peeters

(Based on the Control Categories Table in NIST 800-53.)

When it's time, please join the meeting from here:

url: https://zoom.us/j/98681420926

Meeting ID: 986 8142 0926​​​

------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------