The Cloud Security Industry Summit (CSIS) is a group of Cloud Service Providers, with a mission to align on a vision and approach to developing best-of-breed security solutions. The group includes members from top Cloud Service Providers, partnering as an industry team and evolving a coordinated approach for improving cloud security from component to system to solution.
In order to achieve the CSIS goals, the members formed a technical work group focused on Supply Chain Assurance. The technical work group has worked towards identifying mechanisms to verify supply chain security from component to system to solution. Due to the increasing level of sophistication of attackers and nation state threat mitigations, it is critical for a new generation of servers to be built that are more secure than ever.
Position papers are not designed as prescriptive requirements but rather as input for industry organizations and hardware vendors developing roadmaps and/or requirements relating to cloud adoption. These are freely available, however please reference CSIS if you utilize these in RFPs, RFQs, publications, etc. Papers will be iterated accordingly as needed.