CSA Research

• Zero Trust Workstream 7 Mini-Charter (Pillar: Data) 2022
• Data Pillar Deliverables
• Guidance for identification of protect surface

• Zoom Meeting Link: https://csaurl.org/ai-safety-call
• White Paper Draft Folder: Draft - MCP
• CSA Public Slack: https://csaurl.org/csa-public-slack
• Working Group Slack Channel: #wg-ai-safety

Step 4 - Create Zero Trust Policy  document

Step 4 shared folder (resides under ZT8) 

Focus group for Step 4 Guidance anchored in ZT3, ZT8 & ZT9

──────────

The CSA is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/87205105317?pwd=8n8lzNqSaxlbI3ZBhKC9261Wb7TawZ.1

Meeting ID: 872 0510 5317
Passcode: 762757

---

One tap mobile
+13126266799,,87205105317# US (Chicago)
+16465588656,,87205105317# US (New York)

---

Dial by your location
• +1 312 626 6799 US (Chicago)
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)

Meeting ID: 872 0510 5317

Find your local number: https://cloudsecurityalliance.zoom.us/u/kbUEJRtn0u



──────────

New ZT9 invitation for 2024. Now recurs @1oAM ET every 2 weeks starting 11/13 through 6/30/25.

Workstream shared folder (CSA Google Drive): https://drive.google.com/drive/folders/1I2TAr9w1SPZALvN0J0YWZAz3UJRxDy45?usp=sharing

Workstream Google Subgroup : 
https://groups.google.com/a/groups.cloudsecurityalliance.org/g/zt9-architecture-maturity-model

ZT Circle sub-community: Zero Trust Architecture, Implementation & Maturity Model

CSA Zero Trust Circle Community

──────────
The CSA inviting you to a scheduled Zoom meeting.

Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/89876658483?pwd=ejiOsJbh4elaIK0w9iOmtdvlebODoi.1

Meeting ID: 898 7665 8483
Passcode: 643118

---

One tap mobile
+13126266799,,89876658483# US (Chicago)
+16465588656,,89876658483# US (New York)

---

Dial by your location
• +1 312 626 6799 US (Chicago)
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US

Meeting ID: 898 7665 8483

Find your local number: https://cloudsecurityalliance.zoom.us/u/kcEXojk4gN

---

Join by Skype for Business
https://cloudsecurityalliance.zoom.us/skype/89876658483



──────────

• Workgroup charter:  
• https://docs.google.com/document/d/1OH1en7CN_BzqOBxM3xm7BfAdohlSEda2/edit?usp=drive_link&ouid=104855905675955615891&rtpof=true&sd=true
• Deliverables folder: https://drive.google.com/drive/folders/1a6UM8MLTkvIdHTI3eWrg6tmX1YPHsRpD?usp=drive_link
• References: https://drive.google.com/drive/folders/1qZiIqRO8P6rc7n7c-m8RB4nkduPIbS3s?usp=drive_link
• Circle group:  Pillar: Network/Environment

• SaaS Controls Workbook (where actual development takes place)
• Project Charter
• Project timeline

• CSA events & announcements 

• Guest presentation

• CSA events & announcements
• Demo of finder and auditor for MCP server
• Feedback to improve tools

Resources

• Github: https://github.com/modelcontextprotocol-security
• Website: https://modelcontextprotocol-security.io/

• CSA events, updates, research publications
  
• HIM Circle discussions, recent healthcare cybersecurity news
  
• Review in development and proposed HIM publications
  
• Plan next steps 

──────────

Andy Ruth is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/89060804714?pwd=3SDst79zzrMnPMROhwDY4mbMV7bPP3.1

Meeting ID: 890 6080 4714
Passcode: 191059

---

One tap mobile
+12532050468,,89060804714# US
+12532158782,,89060804714# US (Tacoma)

Join instructions
https://cloudsecurityalliance.zoom.us/meetings/89060804714/invitations?signature=0t9r8Evbfp-G1VrU7US4jMGFjAjcHtUFyf5oRpiKibk



──────────

• CCMv4.1 Development Worksheet (where actual review & development takes place)
• Project Charter
• Project timeline

• SCC WG: Approved charter (by the end 2025)
  
• SCC Vision Paper: This document is co-owned by the SCC WG and the CAR Stakeholder Group. We want an almost final draft by the end of 2025 (which means we need engagement of the volunteers immediately).
• Mapping roadmap: We need to start defining the 2026 mapping roadmap and collecting input on the priorities. - goal is to have a final proposed list of mapping priorities by end of January 2026 / better if by the end of 2025
• SCC Mapping Methodology: 
  • ensuring the WG and the CAR stakeholders understand the goals and objectives of the mapping methodology and tool (by the end 2025)
  • presenting Lefteris proposal and the results of the internal discussion and the testing done by Kurt and Lefteris (by the end 2025)
  • identifying SMEs to involve 
  • defining the roadmap for the AI-driven mapping tool

• CSA announcements 
• TBA

• Infrastructure devices (control plane security)
• Managed and BYOD endpoints
• IoT (LAN/IP IoT, cellular IoT, and protocol-specific IoT)
• OT/ICS

• Team Subgroup (email & meeting distribution): zt4-device@groups.cloudsecurityalliance.org https://groups.google.com/a/groups.cloudsecurityalliance.org/g/zt4-device
• Workstream shared folder (CSA Google Drive): https://drive.google.com/drive/folders/1TcUZDmmfybCRjgmhdETsq0q1MHGyOBIs?usp=sharing
  
• Zero Trust Workstream 4 Mini-Charter
  
• ZT Circle sub-community: Pillar: Device

──────────

The CSA is inviting you to a scheduled Zoom meeting.

Topic: CSA ZT4 Devices Pillar Workstream Meeting (1st Tuesday)
Time: Jan 7, 2025 11:59 PM Eastern Time (US and Canada)
        Every month on the First Tue, 36 occurrence(s)
You can download and import the following iCalendar (.ics) files to your calendar system.
Monthly: https://cloudsecurityalliance.zoom.us/meeting/tZwsduCtrjsoGNZindRdFGfkHBBebPpcQwJz/ics?icsToken=98tyKuGgrzojH9SVshuFRpw-BYj4Xe_ziGJBjY1nlRHhMSR1RQX9HsBgN7BPANvh&meetingMasterEventId=BQISsLoWRTCDbThSmlK7pQ
Join Zoom Meeting


Meeting ID: 881 1950 0222
Passcode: 118373

---
One tap mobile
+16465588656,,88119500222# US (New York)
+16469313860,,88119500222# US

---
Dial by your location
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US

Meeting ID: 881 1950 0222

Find your local number: https://cloudsecurityalliance.zoom.us/u/kcnzAgEmvM

• Follow up on the latest CCM WG activities in Circle.

• If having issues finding the CCM WG, please follow the step by step guide to Circle on-boarding here. 
• WG call meetings are recorded and made available to the rest of the group. The purpose of the recordings and their use is for the writing of meetings minutes and members in "difficult" time zones only. Please visit the "Data Protection Notice" document, which includes the purposes of use, retention period of audio files, etc.

• WG g-drive
• Kick off call slides
  

• Zoom Meeting Link: https://csaurl.org/privacy-call
• CSA Public Slack: https://csaurl.org/csa-public-slack
• Working Group Slack Channel: #wg-privacy

• Meeting Zoom Invite: https://csaurl.org/dpe-call
• DPE Circle Community: https://csaurl.org/dpe-circle
• CSA Public Slack: https://csaurl.org/csa-public-slack
  • See the #dpe-working-group channel for working group discussions

• Zoom Meeting Link: https://csaurl.org/ai-safety-call
• CSA Public Slack: https://csaurl.org/csa-public-slack
• Working Group Slack Channel: #wg-ai-safety

• Publication Development:
  • Data security within an AI Environment  -  June 2025 
    
    
• Proposed (2025):
  • Highly Sensitive/Confidential Data
  • Privacy Enhancing Technologies for AI
    
  • Perils of Personal Identifiable Information in LLMs
  • DORA Guidelines & Regulation
    
    
• Join the Data Security Circle Community for latest working group publication development and links

• ZT1: Zero Trust as a Philosophy & Guiding Principles
• ZT2: Zero Trust Organizational Strategy & Governance
• ZT9: ZT Architecture, Implementation & Maturity Model

Focus group draft research document: Zero Trust Guidance for Building a Resilient Enterprise Environment - Organizational and Architectural Guidance for Achieving Operational Resiliency

Shared document folder: Resiliency

Primary Google group for this research focus group: CSA ZT-FSI Collaboration <zt-fsi-collaboration@groups.cloudsecurityalliance.org>

https://cloudsecurityalliance.zoom.us/j/88570173422?pwd=tLOYkq4C0SDcH78Lja4BBKz4DFf6Ui.1

Topic: CSA ZT Resiliency Focus Group
Time: Jan 3, 2025 10:00 AM Eastern Time (US and Canada)
        Every 2 weeks on Fri, 78 occurrence(s)
You can download and import the following iCalendar (.ics) files to your calendar system.
Biweekly: https://cloudsecurityalliance.zoom.us/meeting/tZwocOmpqTguGNYxILVA0Cry8eQvYmSV9bfC/ics?icsToken=DNmR7Y5F_ihQCd7Y_wAALAAAALK8bppnXmDW7efI6EIle7Nt37-YkZyqFGfSi5wOuYmwCMHH9UU37dyjepPNyPRm_OW2JEOMYUumur_ZaDAwMDAwMQ&meetingMasterEventId=xID3I-MRRs6BUFOydvW3fA

Meeting ID: 885 7017 3422
Passcode: 652105

---
One tap mobile
+16465588656,,88570173422# US (New York)
+16469313860,,88570173422# US

---
Dial by your location
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US

Meeting ID: 885 7017 3422
Find your local number: https://cloudsecurityalliance.zoom.us/u/kd2wNQV5rX

• Agenda:

  • TBD