finos / common-cloud-controls

FINOS Common Cloud Controls
https://www.finos.org/common-cloud-controls-project
Other
27 stars 32 forks source link

08/01/2024 All Hands Meeting Minutes #288

Closed eddie-knight closed 1 week ago

eddie-knight commented 1 month ago

Date

08/01/2024 - 12:00 ET / 17:00 UK

Meeting notices

Agenda

Untracked attendees

jared-lambert commented 1 month ago

Jared Lambert / Microsoft

damienjburks commented 1 month ago

Damien Burks / Citi 👋🏾

eddie-knight commented 1 month ago

👋 :shipit: Eddie Knight / Sonatype

psmulovics commented 1 month ago

Peter Smulovics / Morgan Stanley

sshiells-scottlogic commented 1 month ago

Stevie Shiells / Scott Logic

mlysaght2017 commented 1 month ago

Michael Lysaght / Citi

robmoffat commented 1 month ago

Rob Moffat / FINOS 🐨

sshiells-scottlogic commented 1 month ago

Minutes:

EK: opened the call EK: meeting notices, prev mins. EK: Called out for mentoring at least one other approvers to streamline and remove bottlenecks. EK: WG updates JL: New “resources” folder articulate various types of resources we are leveraging. 2 or 3 folks improving those going deeper into particular areas. Using board/backlog to direct efforts. New person join and putting them to work. Slow but steady, need more people to assign work to. Easy space to get involved. ML: Security WG – Open PR on extending object storage security controls catalog. Aligned with EK template. Good conversation in WG. PR up for RDMS controls. LSEG starting to implement OSCAL.

EK : On PR, Taxonomy WG getting flagged as codeowner as new directory as tests. Can ML review that is exactly how we want to structure the organization of security artifacts. If so we can structure codeowners so that not blocked. DB: Delivery WG making steady progress. GitHub actions merged in for linting and formatting. Discussions on releasing and versioning strategies. Still in process of finalizing those things. SS: Link checker added, meeting template adjusted to reflect WG name/meeting times. First draft of release/milestone guidance added. SS: On behalf of SM and taxonomy:

  1. Refactor RDMS - Ivan / Scott Logic
  2. NoSQL - Sonali / Scott Logic
  3. Graph Database - Eric
  4. Guidelines and Template for taxonomy definitions – Eddie

RM: Discussion with SS about getting Colin from SL to see if can help to get an adopter for AI security controls. JL: Have a call set up on Tuesday but Colin couldn’t connect. Call went on, AI workstream asked to setup use case and can we take that setup the controls. All agree that is what we want to do. List of services What controls do we need. Banks want this right now. Could be opportunity for more people to get involved if we are focusing on a hot topic.

EK: Create a milestone based on JL describing and meets ML expectations

Group: Created milestone for RAG LLM and related issues.

github-actions[bot] commented 2 weeks ago

This issue will be closed as stale in 7 days. Please update this issue if it is still needed.

github-actions[bot] commented 1 week ago

Closed as stale. An update may reopen this issue.