Hi all, Had a great conversation with Paul Comerford from ICO just now. ICO has taken our feedback and will soon be releasing an updated draft with our recommendations. The work with ICO can dovetail

Hello GRC members. My invite to the meeting has the correct Zoom URL (below) but is stubbornly refusing to comply with international time zone standards (I know, I know, typical American). I joined an

Dan, I said I would update the CCC TAC on the GRC’s plans for 2023. I’m cc’ing the GRC mailing list below for folks to chime in on the commitments below. Give us until next TAC to finalize these befor

Update: Paul cannot make tomorrow, he will join us next week.

Just received this email and invited Paul to join us for our weekly meeting tomorrow. From: Paul Comerford <Paul.Comerford@...> Sent: Tuesday, March 21, 2023 1:31 AM To: mark.novak@... Cc: grc@... Sub

Tomorrow’s meeting clashes with OC3 2023. I can attend if we move it earlier by an hour, but I am not the source of the invite.

See you soon! I neglected to send out the agenda. We’ll do an update on CSA outreach and continue looking at AVS control objectives.

I got pulled into our monthly business review tomorrow at the exact hour of our meeting. Usually they take place on a different day. Please proceed without me.

On Thursday I gave a presentation for Anjuna’s customers on Confidential Computing governance. Mark has asked how do auditors prepare to assess systems, and I did not have a good example handy, but I

I will try to illustrate this with a UML diagram at some point but wanted to throw a quick note out to the team explaining something that was discussed in yesterday’ meeting. In the world of complianc

Tomorrow we’re continuing the discussion of AVS governance; this time I propose we focus on: What different parties expect out of governance Start outlining the types of controls that might be present

Last-minute change in plans, and the meeting got moved. I will be there as usual. From: Mark Novak <mark.novak@...> Sent: Tuesday, January 31, 2023 11:33 AM To: grc@... Subject: Out tomorrow Hello eve

Hello everyone, My team is having an all-hands tomorrow at the time of our scheduled meeting, so I won’t be able to attend. Please proceed without me.

Hello everyone, Tomorrow we should hear from one of our newest contributors, Ahmad Khalifeh of Intel. In the remaining time we’ll continue looking into attestation governance patterns. See you all tom

Hello all! A few updates before our meeting tomorrow, in no particular order of importance: I have just finished moving our Attestation governance discussion into a separate document, which is now ref

Hello all! In our conversation last week, the topic of “sociotechnical” architecture and design was mentioned. Allow me to share a link to a YouTube playlist that has a lot of material on that subject

Hello all and welcome to 2023! This Wednesday, I propose we have the following discussions: Update on CSA engagement Proposals for continuing the NIST engagement Discussion of governance patterns arou

The Confidential Computing Consortium (CCC) Governance, Risk and Compliance Special Interest Group (GRC SIG) has reviewed the ICO “Introduction to Anonymisation” call for views and has authored the at

Hello Alex, I was working with Lars on helping to spread information on Confidential Computing in the CSA and other standards organizations he mentioned your name as someone who is highly knowledgeabl

@Daniele Catteddu, thank you for the response and for the introductions. @Lars Ruddigkeit, nice to meet you. Added the Confidential Computing Consortium Governance, Regulatory and Compliance special i