res ear ch lifecycle - cloud security alliance...cloud security alliance initiatives and project...

From inspiration to completion, CSA’s step-by-step guide to producing and distributing research artifacts.

LIFECYCLELIFECYCLERESEARCH RESEARCH

Cloud Security Alliance initiatives and project ideas are conceived and proposed through discussions, submissions, and current trends. New ideas are submitted as research proposals to the appropriate working group(s) or CSA executive for continued development and discussion by members and professionals alike. Research proposals are selected as a consensus by the working group as relevant to the community or industry need. (Typically 1-4 months.)

Research is approved and/or official working group is formed. Appointed leadership carries out research in a collaborative and transparent environment. Plans are developed, and deliverables and key milestones are identified. Meetings are set and research begins. (Typically 4-12 months.)

The publication phase involves copyediting, formatting, and final internal review of artifact prior to publication. Final research will then be sent to PR and sponsors. (Typically 1 month.)

Research outline (working group charter, project plan, agreements, etc.) is developed or updated by members

of the working group and are submitted to CSA advisory groups for review and evaluation. (Typically 1-4 months.)

Peer review will be carried out in a layered review process consisting of 30-90 days for complete review

opportunity. Initiatives are opened for review within the working group(s) and internal subgroups. The next step

of the review process involves the support of the CSA advisory groups. Final phase of review is open to all CSA membership and public sources. (Typically 1-3 months.)

Starts as early as the research phase and can continue until research artifact's end of life. Marketing/PR is

continuous and the goal is to promote use and adoption of all CSA research artifacts. (Ongoing timeframe.)

New ideas and revisions are submitted through various CSA channels by individuals or members of existing CSA working groups.

Ideas are vetted by CSA Research, Executive Team, and reviewed by the appropriate working group(s) and/or industry experts when applicable.

Individuals or existing working groups are notified whether they may proceed

with the intiative.

CONCEPTION

SUBMISSION

Release latest outline for open

review period.

OUTLINE REVIEW

REVIEW NOTIFICATION

Formation and start of initiative identified and proposal phase

begins.

APPROVAL & PRIORITIZATION

DELIVERABLERESEARCH ROADMAP 20XX

DELIVERABLEINITIAL DRAFT

DELIVERABLESFINAL DRAFT FOR RELEASE & PUBLICATION,

COMMUNICATION PLAN

DELIVERABLEFINAL CHARTER

DELIVERABLECOMPILED DRAFT

Develop and/or update a working group outline to define working group scope and outline high-level milestones for the proposed body of work. (Annual review)

OUTLINEProceed with internal strategic evaluation

to include ISC, SME Council, Steering Committees, Enterprise User Council,

Executive Team, Board of Directors, and select industry groups.

INTERNAL EVALUATION

If the outline is approved, research

phase begins.

OUTLINE APPROVAL

Forecast budgets and determine resources needed for sponsorship by assigned CSA executive.

BUDGET FORECASTS

Project roles and responsibilities defined. Subgroups formed if necessary.

CALL FOR FORMATION

Develop sponsorship proposal (if applicable).

As appropriate, set up collaboration site, CSA

Interact Page, and email list for communications.

RESEARCH TOOLS

Schedule calls and meetings to develop and

produce content for deliverable.

PRODUCTION

SPONSORSHIP PROPOSAL

A project calendar and plan is developed to set key milestones for the entire lifecycle of the research.

Determine resource needs and announce a call for participation.

LEADERSHIP APPT.PROJECT PLANNING

Final artifact is sent to graphic design for insertion into template, copyediting, addition of copyrights, review for all required elements, review for mention of corporate members. Integration of sponsors on research artifact (if applicable). Removal of metadata and security scan is performed on research before sending out. (3 weeks prior to publication)

COPYEDIT & FORMAT

Finalize sponsorship if applicable. Distribute marketing information on

how to maximize alliance with CSA.

Distribute to PR prior to publication or release (1 week prior to publication)

SEND TO PR

FINALIZE SPONSORSHIP

Working group and/or CSA Research develops a plan that identifies the channels through which the research will be disseminated, as well as associated milestones.

COMMUNICATION PLAN

Design team sends to Research, Executive Team, and working group for review.

FINAL REVIEW

PROPOSAL

PEER REVIEW

PUBLICATION

EXECUTION

DISSEMINATION

Open public peer review on CSA Interact

(30 days)

OPEN PEER REVIEW

Draft of research artifact is sent to the working group for peer review.

WORKING GROUP PEER REVIEW

CSA peer review from ISC, SME Council, Steering

Committees, Exec Board, and Board of Directors.

(In conjunction with public peer review.)

CSA PEER REVIEW

After 30 days, end public comments and

review period.

END PEER REVIEW

Compilation and consideration of feedback into research artifact. (1 week minimum)

INCORPORATE FEEDBACK

Plan out CloudBytes webinar, sponsor-hosted

events, speaking opportunities for SMEs, etc.

CONTINUED DISTRIBUTION

Post on main CSA global site, and post on work group microsite. Development of large banner on frontpage

(for new research artifacts or major changes/updates), listing in Top Downloads section (if applicable),

publication of press release or blog post, listing on research page under appropriate initiative, etc.

PUBLISH TO CSA WEBSITE

Large-scale social media push, including Twitter

campaign, LinkedIn announcements, and email

list announcements.

PUBLISH ON SOCIAL MEDIA

Promote through internal and external marketing and PR programs.

PR PROMOTION

Review the publication for relevance and repeat research lifecycle as necessary to revise and update content. Release new versions of research material.

RESEARCH EVALUATION

© Copyright 2014, Cloud Security Alliance. All rights reserved.* All exceptions to Research Lifecycle should be submitted to research@cloudsecurityalliance.org