res ear ch lifecycle - cloud security alliance...cloud security alliance initiatives and project...
TRANSCRIPT
From inspiration to completion, CSA’s step-by-step guide to producing and distributing research artifacts.
LIFECYCLELIFECYCLERESEARCH RESEARCH
Cloud Security Alliance initiatives and project ideas are conceived and proposed through discussions, submissions, and current trends. New ideas are submitted as research proposals to the appropriate working group(s) or CSA executive for continued development and discussion by members and professionals alike. Research proposals are selected as a consensus by the working group as relevant to the community or industry need. (Typically 1-4 months.)
Research is approved and/or official working group is formed. Appointed leadership carries out research in a collaborative and transparent environment. Plans are developed, and deliverables and key milestones are identified. Meetings are set and research begins. (Typically 4-12 months.)
The publication phase involves copyediting, formatting, and final internal review of artifact prior to publication. Final research will then be sent to PR and sponsors. (Typically 1 month.)
Research outline (working group charter, project plan, agreements, etc.) is developed or updated by members
of the working group and are submitted to CSA advisory groups for review and evaluation. (Typically 1-4 months.)
Peer review will be carried out in a layered review process consisting of 30-90 days for complete review
opportunity. Initiatives are opened for review within the working group(s) and internal subgroups. The next step
of the review process involves the support of the CSA advisory groups. Final phase of review is open to all CSA membership and public sources. (Typically 1-3 months.)
Starts as early as the research phase and can continue until research artifact's end of life. Marketing/PR is
continuous and the goal is to promote use and adoption of all CSA research artifacts. (Ongoing timeframe.)
New ideas and revisions are submitted through various CSA channels by individuals or members of existing CSA working groups.
Ideas are vetted by CSA Research, Executive Team, and reviewed by the appropriate working group(s) and/or industry experts when applicable.
Individuals or existing working groups are notified whether they may proceed
with the intiative.
CONCEPTION
SUBMISSION
Release latest outline for open
review period.
OUTLINE REVIEW
REVIEW NOTIFICATION
Formation and start of initiative identified and proposal phase
begins.
APPROVAL & PRIORITIZATION
DELIVERABLERESEARCH ROADMAP 20XX
DELIVERABLEINITIAL DRAFT
DELIVERABLESFINAL DRAFT FOR RELEASE & PUBLICATION,
COMMUNICATION PLAN
DELIVERABLEFINAL CHARTER
DELIVERABLECOMPILED DRAFT
Develop and/or update a working group outline to define working group scope and outline high-level milestones for the proposed body of work. (Annual review)
OUTLINEProceed with internal strategic evaluation
to include ISC, SME Council, Steering Committees, Enterprise User Council,
Executive Team, Board of Directors, and select industry groups.
INTERNAL EVALUATION
If the outline is approved, research
phase begins.
OUTLINE APPROVAL
Forecast budgets and determine resources needed for sponsorship by assigned CSA executive.
BUDGET FORECASTS
Project roles and responsibilities defined. Subgroups formed if necessary.
CALL FOR FORMATION
Develop sponsorship proposal (if applicable).
As appropriate, set up collaboration site, CSA
Interact Page, and email list for communications.
RESEARCH TOOLS
Schedule calls and meetings to develop and
produce content for deliverable.
PRODUCTION
SPONSORSHIP PROPOSAL
A project calendar and plan is developed to set key milestones for the entire lifecycle of the research.
Determine resource needs and announce a call for participation.
LEADERSHIP APPT.PROJECT PLANNING
Final artifact is sent to graphic design for insertion into template, copyediting, addition of copyrights, review for all required elements, review for mention of corporate members. Integration of sponsors on research artifact (if applicable). Removal of metadata and security scan is performed on research before sending out. (3 weeks prior to publication)
COPYEDIT & FORMAT
Finalize sponsorship if applicable. Distribute marketing information on
how to maximize alliance with CSA.
Distribute to PR prior to publication or release (1 week prior to publication)
SEND TO PR
FINALIZE SPONSORSHIP
Working group and/or CSA Research develops a plan that identifies the channels through which the research will be disseminated, as well as associated milestones.
COMMUNICATION PLAN
Design team sends to Research, Executive Team, and working group for review.
FINAL REVIEW
PROPOSAL
PEER REVIEW
PUBLICATION
EXECUTION
DISSEMINATION
Open public peer review on CSA Interact
(30 days)
OPEN PEER REVIEW
Draft of research artifact is sent to the working group for peer review.
WORKING GROUP PEER REVIEW
CSA peer review from ISC, SME Council, Steering
Committees, Exec Board, and Board of Directors.
(In conjunction with public peer review.)
CSA PEER REVIEW
After 30 days, end public comments and
review period.
END PEER REVIEW
Compilation and consideration of feedback into research artifact. (1 week minimum)
INCORPORATE FEEDBACK
Plan out CloudBytes webinar, sponsor-hosted
events, speaking opportunities for SMEs, etc.
CONTINUED DISTRIBUTION
Post on main CSA global site, and post on work group microsite. Development of large banner on frontpage
(for new research artifacts or major changes/updates), listing in Top Downloads section (if applicable),
publication of press release or blog post, listing on research page under appropriate initiative, etc.
PUBLISH TO CSA WEBSITE
Large-scale social media push, including Twitter
campaign, LinkedIn announcements, and email
list announcements.
PUBLISH ON SOCIAL MEDIA
Promote through internal and external marketing and PR programs.
PR PROMOTION
Review the publication for relevance and repeat research lifecycle as necessary to revise and update content. Release new versions of research material.
RESEARCH EVALUATION
© Copyright 2014, Cloud Security Alliance. All rights reserved.* All exceptions to Research Lifecycle should be submitted to [email protected]