CSA Research

Step 4 - Create Zero Trust Policy  document

Step 4 shared folder (resides under ZT8) 

Focus group for Step 4 Guidance anchored in ZT3, ZT8 & ZT9

──────────

The CSA is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/87205105317?pwd=8n8lzNqSaxlbI3ZBhKC9261Wb7TawZ.1

Meeting ID: 872 0510 5317
Passcode: 762757

---

One tap mobile
+13126266799,,87205105317# US (Chicago)
+16465588656,,87205105317# US (New York)

---

Dial by your location
• +1 312 626 6799 US (Chicago)
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)

Meeting ID: 872 0510 5317

Find your local number: https://cloudsecurityalliance.zoom.us/u/kbUEJRtn0u



──────────

• CSA announcements 
• TBA

The CSA is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/88119613810?pwd=Kfyu1aYD5ZPZekpyGIEnwAtu2ZLRl7.1

Meeting agenda
https://docs.zoom.us/agenda/doc/5b9c6d25-6580-4056-8711-684b6155e41d?from=chext

Meeting ID: 881 1961 3810
Passcode: 393416
---

One tap mobile
+13092053325,,88119613810# US
+13126266799,,88119613810# US (Chicago)

---
Join by SIP
• [email protected]

Join instructions
https://cloudsecurityalliance.zoom.us/meetings/88119613810/invitations?signature=Hz_anb91KcCld4_fFd0LaGk0m42bknMw7khCSL-12o4

──────────

CSA Zero Trust Working Group - Informational Presentation from QWERX

Title: What the Intelligence Community Knows About Credentials That the Private Sector Hasn't Learned Yet: Applying Compartmentalization Principles to Device Authentication Architecture

Abstract:

The intelligence community has practiced defense-in-depth and compartmentalization for decades — limiting the blast radius of any single compromise by ensuring that access to one secret never grants access to all secrets. This principle has shaped how nation-states protect their most sensitive information and operations. Enterprise cybersecurity uses the language of compartmentalization (microsegmentation, least privilege, Zero Trust) but has not applied the principle to credential architecture itself. A device authentication credential that persists unchanged for 90 days or longer violates compartmentalization at the most fundamental level: it grants persistent access across time rather than limiting access to the moment it is needed.

This session examines what happens when we apply intelligence community compartmentalization principles to enterprise device authentication. Using real-world breach case studies — including OPM, the CISA AWS GovCloud key exposure, and infrastructure attacks on U.S. critical systems — we demonstrate how static credentials create the exact conditions that compartmentalization was designed to prevent: unbounded lateral access from a single point of compromise.

Attendees will leave with a practical evaluation framework for assessing whether their credential architecture meets the compartmentalization standard their broader security posture already claims to follow and what architectural alternatives exist.

This presentation is vendor-neutral in approach and focused on architectural principles rather than product evaluation.

Speakers:

Greg Cullison. CEO & Co-Founder, QWERX

Greg Cullison is a serial entrepreneur, former Foreign Service Officer, and Naval Intelligence reserve officer who earned the Bronze Star for counterterrorism work in Iraq. He served diplomatic postings in Belgrade and Rabat, and held technology leadership roles at Intelligent Shift/VTG, BearingPoint, and Arthur Andersen's inaugural e-government program. Greg founded and sold ProVerity, Inc. in 2015. He holds an MPA from Princeton University and a BA in International Relations from Claremont McKenna College. Greg recently appeared on NYSE Live to announce QWERX’s commercial availability.

Randall Fort. Chief Operating Officer & Co-Founder, QWERX
Randall Fort served as U.S. Assistant Secretary of State for Intelligence and Research from 2006 to 2009, managing all-source intelligence analysis for the Secretary of State and establishing the Department's first Cyber Policy Group. Previously he held senior positions at Goldman Sachs, including Chief of Staff to the firm's president and Director of Global Security, and at Raytheon, where he served as Director of Programs Security and Director of Strategic Growth. Earlier government service includes the White House, Treasury Department, and State Department across four administrations. He holds a BA from George Washington University and was a Henry Luce Scholar in Japan.

──────────

The CSA is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/81461494249?pwd=bJs1YmtD0SiFhvUrzyxbHmoxEvlTS9.1

Meeting agenda
https://docs.zoom.us/agenda/doc/fce4668d-05c2-43fe-b96a-1da5e1c47494?from=chext

Meeting chat link
https://cloudsecurityalliance.zoom.us/launch/jc/81461494249

Meeting ID: 814 6149 4249
Passcode: 264251

---

One tap mobile
+16469313860,,81461494249# US
+13017158592,,81461494249# US (Washington DC)


---

Join by SIP
• [email protected]

Join instructions
https://cloudsecurityalliance.zoom.us/meetings/81461494249/invitations?signature=6T8K6P0KaVo8nVxPeEUxo5qsmkJXQk7jD_eW8iMg-sE



──────────

──────────
Andy Ruth is inviting you to a scheduled Zoom meeting.

Topic: My Meeting
Time: Feb 27, 2025 07:00 AM Pacific Time (US and Canada)
        Every 2 weeks on Thu, 79 occurrence(s)
Please download and import the following iCalendar (.ics) files to your calendar system.
Weekly: https://cloudsecurityalliance.zoom.us/meeting/tZMpdu-uqz4sGtFfmNj63YkGZ3BBC4TwQjrf/ics?icsToken=DP1T7ZxjwSd4OYVLYgAALAAAAIbIGH-sTqikUkaee5zNDnY9CJ5sHPAVcEDJR4MAqEWsc8zFUxs19NheJELiTL0ttxlMDer-sc63yFk2fDAwMDAwMQ&meetingMasterEventId=vBlZzx1SQyu_c3BRbiI00A
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/87416655605?pwd=EvaXfuiS1NobgP97n28rJ9LoHmdrxl.1

Meeting ID: 874 1665 5605
Passcode: 681158

---

One tap mobile
+12532158782,,87416655605# US (Tacoma)
+12532050468,,87416655605# US

---

Dial by your location
• +1 253 215 8782 US (Tacoma)
• +1 253 205 0468 US
• +1 720 707 2699 US (Denver)
• +1 346 248 7799 US (Houston)
• +1 669 444 9171 US
• +1 719 359 4580 US
• +1 564 217 2000 US
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 689 278 1000 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US

Meeting ID: 874 1665 5605

Find your local number: https://cloudsecurityalliance.zoom.us/u/kRTNsVD7t




──────────

Links

·       CCM Folder (where this work isbeing performed)

·       Spreadsheet (we are working in)

·       ISO Resources

·       BSIResources

──────────
Andy Ruth is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/84009600888?pwd=pdRDmqzktkO8LbzJp0P8kz61ct7uR3.1

Meeting ID: 840 0960 0888
Passcode: 170124

---

One tap mobile
+12532050468,,84009600888# US
+12532158782,,84009600888# US (Tacoma)

Join instructions
https://cloudsecurityalliance.zoom.us/meetings/84009600888/invitations?signature=LvSXITMKYSV1qvGRFDgDmZW5OIfz5CI47AERYSlnhFU


──────────

• ZT6 - Pillar: Applications & Workloads
• ZT7 - Pillar: Data

• ZT6 main folder: 
• ZT6 Application/Workload Deliverables
• ZT7 Data Pillar Deliverables
• Defining the protect surface document

• zt6-applications-workload@groups.cloudsecurityalliance.org
• https://groups.google.com/a/groups.cloudsecurityalliance.org/g/zt6-applications-workload
• zt7-data@groups.cloudsecurityalliance.org
• https://groups.google.com/a/groups.cloudsecurityalliance.org/g/zt7-data

• Zoom Meeting Link: https://csaurl.org/ai-safety-call
• White Paper Draft Folder: Draft - MCP
• CSA Public Slack: https://csaurl.org/csa-public-slack
• Working Group Slack Channel: #wg-ai-safety

• Managed, BYOD and external user endpoints
• IoT (LAN/IP IoT, cellular IoT, and protocol-specific IoT)
• OT/ICS
• Infrastructure devices (control plane security)

• SaaS Controls Workbook (where actual development takes place)
• Project Charter
• Project timeline

• Workgroup charter:  
• https://docs.google.com/document/d/1OH1en7CN_BzqOBxM3xm7BfAdohlSEda2/edit?usp=drive_link&ouid=104855905675955615891&rtpof=true&sd=true
• Deliverables folder: https://drive.google.com/drive/folders/1a6UM8MLTkvIdHTI3eWrg6tmX1YPHsRpD?usp=drive_link
• References: https://drive.google.com/drive/folders/1qZiIqRO8P6rc7n7c-m8RB4nkduPIbS3s?usp=drive_link
• Circle group:  Pillar: Network/Environment

• CSA events & announcements 

• Guest presentation

Meeting reminders and agenda will be sent to the public Slack channel for Top Threats.
──────────
Andy Ruth is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/81253973920?pwd=Q3zL4OJ9r4al7JunldRD4aFvspOJGf.1

Meeting ID: 812 5397 3920
Passcode: 814228

---

One tap mobile
+12532050468,,81253973920# US
+12532158782,,81253973920# US (Tacoma)

Join instructions
https://cloudsecurityalliance.zoom.us/meetings/81253973920/invitations?signature=JxkXJz54gOuDi5iTfagwfOjR5bbxwqVVTiVym_BrYqQ


──────────

• WG g-drive
• Kick off call slides
  
• WG cheatsheet

• Embedding CCM v4.1 in AICM: Comparing and verifying alignment task
• Next Action Steps

• WG g-drive
• Kick off call slides
  

• CSA AI Safety Working Group Leaders <[email protected]>
• CSA - ZT Research Leadership <[email protected]>
• CSA AI ZT Collaboration <[email protected]>

1. Convene monthly leadership collaboration meetings = this invitation
   • Noon on the First Tuesday of the month

1. Share research proposals and draft docs with both ZT+AI leadership teams for proposal (and later peer) review
• I suggest that we document initiatives and proposals in the ZT-AI Collaboration Initiatives spreadsheet  (proposals folder link) for review and comment, including the following key metadata to facilitate needed CSA management approval.
  • Title
  • Target Audience
  • Abstract
2. Establish collaborative development focus groups for approved initiatives, with their own folder and regular meetings, inviting volunteers from both the AI & ZT WGs
3. Include ZT+AI leadership teams in internal peer reviews, and specifically invite all members of both WGs to participate in public peer reviews

1. Set up/leverage the following in support of these efforts:
   • Shared ZT-AI Collaboration folder with appropriate subfolders and accessible by both leadership groups and the existing collab group.
   • Collaborative proposals and initiatives are collected in the ZT-AI Collaboration Initiatives spreadsheet, which all group members are encouraged to contribute to.
   • Existing google group: CSA ZT LLM with 23 members. 
     csa-zt-llm@groups.cloudsecurityalliance.org
   • New groups for new focus groups as they're initiated
   • Existing Slack channel that folks should join and use: #ai-zt-collaboration

• AI Safety WG Page, includes a summary of workgroup structure and initiatives
• Zero Trust WG Page, includes a summary of workgroup structure and initiatives

ZT Circle sub-community: Automation, orchestration, visibility & analytics

Team Subgroup (email & meeting distribution):
[email protected]
https://groups.google.com/a/groups.cloudsecurityalliance.org/g/zt8-automation-analytics

• Zoom Link: https://csaurl.org/aarm-call
• Website: https://aarm.dev
• Slack Channel: https://csaurl.org/aarm-slack

• ZT1: Zero Trust as a Philosophy & Guiding Principles
• ZT2: Zero Trust Organizational Strategy & Governance

Topic: CSA ZT1+2 Workgroup PM Meeting
Time: Jan 10, 2025 03:00 PM Eastern Time (US and Canada)
        Every 2 weeks on Fri
You can download and import the following iCalendar (.ics) files to your calendar system.
BIweekly: https://cloudsecurityalliance.zoom.us/meeting/tZIqceiqrT4rHdb12nTMeJOkgBlWICqyK6Jk/ics?icsToken=DKimTG9FLW0xp-pEugAALAAAALNaqNCq4ZIuwT4F0vKB4VRIYKG7LxS0lqb22kWnQQyHT5yRkRA-nhYwYftcPQQ2tb21DQqbYIco4HkUgTAwMDAwMQ&meetingMasterEventId=Vr2cMhOyTP-fs5Mt6Y-5lw

Meeting ID: 867 6123 5172
Passcode: 916333

---
One tap mobile
+13017158592,,86761235172# US (Washington DC)
+13052241968,,86761235172# US

---
Dial by your location
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US

Meeting ID: 867 6123 5172

Find your local number: https://cloudsecurityalliance.zoom.us/u/kdcgBHY5jB

Join Zoom Meeting


Meeting ID: 867 6123 5172
Passcode: 916333
---

One tap mobile
+13017158592,,86761235172# US (Washington DC)
+13052241968,,86761235172# US

---
Dial by your location
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US

Meeting ID: 867 6123 5172

Find your local number: https://cloudsecurityalliance.zoom.us/u/kdcgBHY5jB
---
Join by Skype for Business
https://cloudsecurityalliance.zoom.us/skype/86761235172
──────────

──────────

Erik Johnson is inviting you to a scheduled Zoom meeting.
Join Zoom Meeting
https://cloudsecurityalliance.zoom.us/j/88008597818?pwd=FqTSqQ7c3selNe76e4aXCglaSSU8oE.1

Meeting ID: 880 0859 7818
Passcode: 842904

---

One tap mobile
+16465588656,,88008597818# US (New York)
+16469313860,,88008597818# US

---

Dial by your location
• +1 646 558 8656 US (New York)
• +1 646 931 3860 US
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US
• +1 669 444 9171 US
• +1 689 278 1000 US
• +1 719 359 4580 US
• +1 720 707 2699 US (Denver)
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)

Meeting ID: 880 0859 7818

Find your local number: https://cloudsecurityalliance.zoom.us/u/kuxPeERXi



──────────