https://wiki.idesg.org/index.php?action=history&feed=atom&title=July_24%2C_2014_Meeting_PageJuly 24, 2014 Meeting Page - Revision history2026-04-16T14:45:40ZRevision history for this page on the wikiMediaWiki 1.38.4https://wiki.idesg.org/index.php?title=July_24,_2014_Meeting_Page&diff=4268&oldid=prevOmaerz: 2 revisions imported: Initial Upload of old pages from IDESG Wiki2018-06-28T04:02:01Z<p>2 revisions imported: Initial Upload of old pages from IDESG Wiki</p>
<p><b>New page</b></p><div>==SECURITY COMMITTEE / FUNCTIONAL MODEL MEETING NOTES==<br />
Meeting Date: July 24, 2014<br />
<br /><br />
<br /><br />
'''Attendees'''<br /><br />
*Adam Migus<br />
*Ann Racuya-Robbins<br />
*Cathy Tilton<br />
*Christopher Spottiswoode<br />
*Jerry Kickenson<br />
*Mike Garcia<br />
*Paul Grassi<br />
*Robert Faron<br />
*Ryan Galluzzo<br />
*Sal D’Agostino<br />
*Sean Brooks<br />
*Steve Orrin<br />
<br /><br />
'''Meeting Notes'''<br />
*Notes taken by Adam Migus<br />
#Roll call; Quorum determination<br />
#IPR policy reminder - https://www.idecosystem.org/system/files/filedepot/103/IDESG%20IPR%20Policy.pdf <br />
# Administrative<br />
#* Sal chaired the meeting as previously agreed upon because Adam Madlin is away<br />
#* Motion to approve 7/10 draft minutes by Adam Migus; seconded by Steve<br />
#* Robert pointed out the misspelling of his last name in 7/17 draft minutes.<br />
#* Motion to approve 7/17 draft minutes by Robert after correcting the spelling of his name; seconded by Ann <br />
# Attributes Adhoc Group<br />
#* Jerry drafted and sent out [[File:IDESG_Attribute_Assurance_Proposal.docx]] with a comments matrix sheet<br />
#* Meeting was held yesterday but only 3 people attended<br />
#* There were some comments; Jerry will update the proposal and send it out<br />
#* Jerry and Sal agreed that it should be shared with the chairs<br />
#* Jerry proposed a comments deadline of August 18th<br />
# Interaction Model<br />
#* Ryan recapped the idea of separating out the interaction model from the functional model<br />
#* The requirements meeting had minimal attendance so discussion was deferred to the meeting on Monday<br />
#* We will be discussing the requirements and looking for other sources of requirements as input<br />
#** Sal reiterated that we are trying to leverage existing controls such as the previously mentioned [[https://cloudsecurityalliance.org/ Cloud Security Alliance]] [[https://cloudsecurityalliance.org/research/ccm/ Cloud Controls Matrix]] which has a mapping of controls across function. We are looking to emulate that approach in that we map controls to our own functional elements.<br />
# Functional Model<br />
#* Sal confirmed that we have already agreed to separate out the Interaction Model<br />
#* Steve suggested add "requirements" to "policy/rule" under the GRC section<br />
#* Ann suggested we add words to indicate that GRC is external to the entity<br />
#* Debated the name of the "Business Operations" box<br />
#** The consensus was to call it "Administration and Operations"; Steve motioned and Adam Migus seconded<br />
#New business - none<br />
<br /><br />
'''Actions'''<br />
* Mike to send out an updated version of the document before the next meeting.<br />
<br /><br />
{{FMWGNavBar}}</div>Omaerz