SDLC Framework WG Bi-weekly call - January 5th

## Date

Monday January 5th- 1000 EST / 1500UK

## Untracked attendees

| Name | Firm | Comment |
| :--- | :--- | :------ |

## Meeting notices
- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).

- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).

- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

## Agenda

- [x] Convene, roll call, welcome new people
- [x] Approve previous meeting minutes: https://github.com/finos/devops-automation/issues/282
- [x] Upcoming Finos Toronto
- [x] Control Lifecycle document review within Finos
- [x] New Maintainers
- [x] (Fidelity) https://github.com/finos-labs/SDLC-Controls-Framework/issues/24
- [x] (UBS) https://github.com/finos-labs/SDLC-Controls-Framework/issues/23
- [x] AOB, Q&A & Adjourn (5mins)

## Decisions Made

- Decision that George will submit a Toronto Finos presentation.
- Aaron to try and find a co-presenter from a
- The correct names were identified for UBS
- Fidelity we should check before reaching out to ensure we have the same names.

## Action Items

- Common controls document for review shared around pending review.
- Do we also want to do a Toronto workshop?
- Schedule longer workshop session for February over email
- Aaron to follow up with maintainers for approval of the maintainer list.
- New maintainers to obtain/share their Github IDs for inclusion into the ACL.

## Meeting Notes
Discussed doing in person or remote workshops as a potential solution to increasing the pace/rate of change, in addition to expanding the maintainer scope.
A discussion on the upcoming Toronto finos conference in April, potentially repeating the NY material to drive more interest.

A side discussion on the role of AI as a reviewer and the inclusion of language to specify whether a machine/AI can be a valid reviewer but contingent on a human being in the loop elsewhere in the pipeline, this is worth remembering when we define the controls.

Discussed the controls definition document shared around for review for feedback (sadly there wasn't any at this time).

### Zoom info

([https://zoom-lfx.platform.linuxfoundation.org/meeting/96292319760?password=a023f03e-c2aa-46fb-aae3-5d93c9d9664e](https://zoom-lfx.platform.linuxfoundation.org/meeting/96292319760?password=a023f03e-c2aa-46fb-aae3-5d93c9d9664e))

**Github Repo:** https://github.com/finos-labs/SDLC-Controls-Framework/

**Project Board:** https://github.com/orgs/finos-labs/projects/18

**Mailing List:** Email [sdlc-framework+subscribe@lists.finos.org](mailto:sdlc-framework+susbscribe@lists.finos.org) to subscribe to our mailing list