Working Group
Enterprise Authority to Operate (EATO)
This working group’s mission is to achieve and maintain certification for small and mid-sized vendors and service providers to be accepted by larger corporate clients.
Enterprise Authority to Operate Working Group Charter 2023
The EATO Working Group will define the control and assessment framework, assessment guidance and auditing principles and requirements.
Working Group Leadership
Rolf Becker
Co-Founder and Chair at UBS
Rolf A. Becker is Head Service Control Governance at UBS, globally responsible for Cloud Governance regarding Risk and Control over the UBS Group Cloud adoption and for outsourcing to external cloud-based 3rd party services. Previous roles have been the management of the Cyber and Information Security Portfolio reporting to the UBS CISO at a global level, and the management of the Client Data Confidentiality Program Unstructured Data Protec...
Working Group Co-Chairs
Sébastien Contreras
Sébastien Contreras is responsible for Pictet Group Outsourcing Framework, as well as for Cloud Security Governance. Prior to that, he was responsible for Group Confidentiality & Information Management at Tetra Laval Group and for Information Security Strategy & Architecture at Merck and Merck Serono.
20 years of experience in Information Security across highly regulated industries such as Banking, Pharmaceutical & BioTech, Manufactur...
| Publications in Review | Open Until |
|---|---|
| Standards-Benchmarks-Maturity | Dec 13, 2025 |
| Open Source Red Teaming Tool: PyRIT Automation Capability in Agentic Red Team Testing Environments | Dec 13, 2025 |
| Using Zero Trust Against Identity Spoofing and Abuse | Dec 20, 2025 |
| Using Zero Trust to Secure Enterprise Information in LLM Environments | Dec 20, 2025 |
Who can join?
Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.
What is the time commitment?
The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.
Open Peer Reviews
Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.