You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
FINOS Common Cloud Controls (FINOS CCC) is an open standard project that describes consistent controls for compliant public cloud deployments in the financial services (FS) sector.
12
10
13
11
This standard is a collaborative project which aims to develop a unified set of cybersecurity, resiliency, and compliance controls for common services across the major cloud service providers (CSPs).
14
12
15
13
[Download the FINOS CCC Primer Here](./docs/resources/training/FINOS-CCC-Primer-June-2024.pdf)
16
14
17
-
## What Are The Benefits?
18
-
19
-
### 💯 Defining Best Practices Around Cloud Security
20
-
21
-
> CCC aims to standardize cloud security controls for the banking sector, providing a common set of controls that CSPs can implement to meet the requirements of FS firms. As multiple FS firms are involved in the project, effort is shared, the controls will be representative of the sector as a whole, and be more robust than any one firm could develop on its own.
15
+
## How To Use It
22
16
23
-
### 🎯 One Target For CSPs To Conform To
17
+
-**For controls development:** Download the latest [release PDF or Markdown(https://github.com/finos/common-cloud-controls/releases) for your target service, and use that as the basis for developing a control catalog for your specific organization or use case
24
18
25
-
> If all FS firms specify their own cloud infrastructure requirements, CSPs will have to conform to multiple standards. CCC aims to provide a single target for CSPs to conform to.
19
+
-**For automation development:** Download the latest [release YAML for your target service](https://github.com/finos/common-cloud-controls/releases), and build tests for each “Test Requirement,” organized according to the control they are part of. Open source validators are currently being developed by the [Compliant Financial Infrastructure](https://github.com/finos/compliant-financial-infrastructure) project.
26
20
27
-
### 🎒 Sharing The Burden Of A Common Definition
21
+
##How To Contribute
28
22
29
-
> CCC aims to reduce the burden of compliance for CSPs by providing a common definition of controls which they can adopt. As CCC controls are specified in a cloud-agostic way, CSPs can implement them in a way that is consistent with their own infrastructure, while delivering services that FS firms understand and trust.
30
-
31
-
### 🧭 A Path Towards Common Implementation
23
+
There are several ways to contribute to FINOS Common Cloud Controls.
32
24
33
-
> FINOS sister project, [Compliant Financial Infrastructure](https://github.com/finos/compliant-financial-infrastructure) aims to be a downstream implementation of the CCC controls standard. In tandem with CCC, this will provide FS firms with a one-stop shop for secure cloud infrastructure deployment.
25
+
### 1. Improving CCC
34
26
35
-
### 🥇 A Path Towards Certification
27
+
FINOS CCC is maintained and run through GitHub.
36
28
37
-
> It is envisaged that eventually, CCC will offer _certification_ for CSPs who conform to the standard.
29
+
- Check [the issues](https://github.com/finos/common-cloud-controls/issues) to see if there's anything you'd like to work on.
30
+
- CCC follows an iterative process, so you can suggest changes to the standard at any time. Simply [Raise a GitHub Issue](https://github.com/finos/common-cloud-controls/issues/new/choose) to ask questions or make suggestions.
31
+
- If you see something in the repo that you'd like to improve, Pull Requests are always welcome - the main branch of the repo is considered an iterative development branch.
38
32
39
-
##How Does It Work?
33
+
### 2. Join FINOS CCC Project Meetings
40
34
41
-
The CCC project is in **incubation** at the moment but aims to deliver its first standards in 2024. The project is split into 6 working groups, each with a specific focus:
35
+
The CCC project is split into 6 working groups as follows:
42
36
43
37
-**Communications / All Hands**: Focused on the overall project communications and community engagement.
44
38
-**Security** - Working to specify the security controls and threats that will be covered by the standard.
@@ -47,15 +41,7 @@ The CCC project is in **incubation** at the moment but aims to deliver its first
47
41
-**Taxonomy** - Focused on defining the taxonomy of cloud services that will be covered by the standard.
48
42
-**Delivery** - Focused on the delivery of the CCC standard for use downstream by FS firms and CSPs.
49
43
50
-
Work is done in the open, with all meetings and decisions documented in the project GitHub repository.
51
-
52
-
## Get Involved with FINOS Common Cloud Controls
53
-
54
-
There are several ways to contribute to FINOS Common Cloud Controls.
55
-
56
-
### 1. Join FINOS CCC Project Meetings
57
-
58
-
The CCC project is split into 6 working groups in the CCC project which meet on a fortnightly basis:
44
+
Work is done in the open, with all meetings and decisions documented in the project GitHub repository. Working groups meet on a fortnightly basis:
@@ -68,17 +54,13 @@ The CCC project is split into 6 working groups in the CCC project which meet on
68
54
69
55
Find the next meeting on the [FINOS Community Calendar](https://finos.org/calendar) and browse [Past Meeting Minutes in GitHub](https://github.com/finos/common-cloud-controls/labels/meeting).
70
56
71
-
### 2. Join the FINOS Common Cloud Controls Mailing Lists
72
-
73
-
FINOS Common Cloud Controls communications are conducted through the <ccc-participants@lists.finos.org> mailing list. Simply email [ccc-participants+subscribe@lists.finos.org](mailto: <ccc-participants+subscribe@lists.finos.org>) to join.
74
-
75
-
### 3. Raise a FINOS Common Cloud Controls GitHub Issue
57
+
### 3. Join the FINOS CCC Mailing Lists
76
58
77
-
FINOS Common Cloud Controls is maintained and run through GitHub. Simply [Raise a GitHub Issue](https://github.com/finos/common-cloud-controls/issues/new/choose) to ask questions or make suggestions.
59
+
FINOS CCC communications are conducted through the <ccc-participants@lists.finos.org> mailing list. Simply email [ccc-participants+subscribe@lists.finos.org](mailto: <ccc-participants+subscribe@lists.finos.org>) to join.
78
60
79
-
### FINOS CSLA Needed to Participate in Common Cloud Controls
61
+
### FINOS CSLA Needed to Participate in CCC
80
62
81
-
All FINOS Common Cloud Controls participants are required to sign a FINOS [Community Specification Contributor License Agreement](https://github.com/finos/standards-project-blueprint/blob/main/governance-documents/Getting%20Started.md#best-practices) before joining project calls and collaborating in working groups.
63
+
All FINOS CCC participants are required to sign a FINOS [Community Specification Contributor License Agreement](https://github.com/finos/standards-project-blueprint/blob/main/governance-documents/Getting%20Started.md#best-practices) before joining project calls and collaborating in working groups.
82
64
83
65
Please visit [participants.md](participants.md) and raise a Pull Request by adding your `name`, `organisation` and `enrollment date` to the markdown file.
0 commit comments