What is the plan and direction for the CDMC Technical Spec Working Group?

[mcleo-d]

The following questions have been raised regarding the planning and direction of the CDMC Technical Spec Working Group ...

1. What is the plan for the technical spec working group?
2. Who is involved in those conversations?
3. Who is leading that effort?
4. What is the timeline we're expecting for output from that group?

Cloud Data Management Capabilities Framework

Best Practices for Managing Data in the Cloud - CDMC_Framework_V1.1.1.pdf

CDMC Controls Procedures and Test Specifications

CDMC Controls Procedures and Test Specifications v1.1.1.pdf

CDMC Key Controls and Automations

CDMC Key Controls and Automations - V1.1.1.pdf

[mcleo-d]

Count me in 👋🏻

[mtronci]

Happy to contribute to this item

[eddie-knight]

Please include me on any conversations related to this 👍

[mcleo-d]

@peter-thomas-db @abdullahgarcia @thinkl33t - I'll count you in too 😁

[mcleo-d]

Hi all 👋🏻

The latest version of the CDMC_Framework_V1.1.1.pdf, CDMC Controls Procedures and Test Specifications v1.1.1.pdf and CDMC Key Controls and Automations - V1.1.1.pdf documents have been added to the main body of this discussion #174 (comment)

Many thanks,

James 🚀

[mcleo-d]

I would like to share the following question asked by Jorges in the Compliant Financial Infrastructure Slack below ...

https://finos-lf.slack.com/archives/C01RNUMC2DP/p1638892956151100

Do we have any prelim/draft/rough document where we precisely define the meaning of "compliant infrastructure" ?
What kind of "compliance" and what kind of "infrastructure" are we focusing on?
I am browsing the CDMC Framework (thank you, James!)

It would be great to discuss if further definitions need to be created and shared.

[gibsocol]

I mentioned in the 17-Dec meeting that Snowflake had published configuration and test scripts that they used in KPMG's assessment of the Snowflake / Alation combo against the 14 key controls.

There are available here: https://github.com/Snowflake-Labs/EDMC-CDMC-v1-14-Control_Mapping

[abdullahgarcia]

Commenting to "bring it back to life".

[thinkl33t]

We're going to modify #204 to better reflect this relationship now.

[eddie-knight]

A few conversations have been had during the community calls to determine that CDMC and CFI will both use CIS as baseline standards to streamline compatibility. Precise next steps are pending work that can currently only be executed by CDMC.

[eddie-knight]

Locking conversation as stale. If the CDMC collaboration issue is raised again in a community call we may come back to use this thread again at that time.