SDLC Framework WG Bi-weekly call - June 8th 2026

## Date

8th June 2026 - 10am EST / 3pm UK

## Untracked attendees

| Name | Firm | Comment |
| :--- | :--- | :------ |

## Meeting notices
- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).

- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).

- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

## Agenda

- [ ] Convene, roll call, welcome new people
- [ ] Approve previous meeting minutes
- [ ] Roundtable discussion on project status
- [ ] Contribution Processes
- [ ] Control review
- [ ] OSFF London Discussion
- [ ] AOB, Q&A & Adjourn (5mins)

## Notes
- OSFF: London Reminder, it is coming up, book your tickets!
- Workshop on the 24th
- Discussed Project Future and roadmap to becoming a "project". Karl looking to set up a meeting to discuss further and showcase our progress.
- Discussed PRs raised with new additions
- Agreed to merge and get them into the draft we have
- Potential for sync up with the http://cyberriskinstitute.org/
- as well as the Luxembourg house of cyber security

## Follow Ups
- [x] Merge outstanding pull requests
- [x] Include control "placement"/"phase". e.g mi-18. To the site
- [ ] Control gap to be added for code review
- [x] "Type" field doesn't appear to reflect in the search correctly, some are missing
- [ ] Separate control for infrastructure inventory
- [ ] Review of mitigations missing risks today, propose gaps to be closed
- [x] Requirements control needs to be finished and to be linked appropriately to a risk
- [x] Mail German the slides/introduction to SDLCCC
- [ ] ...

### Zoom info

**Join Zoom Meeting**
- https://zoom.us/j/94904595244
- Meeting ID: 949 0459 5244
- Passcode: 545224
- Find your local number: https://zoom.us/u/aesEqmNODb

**Github Repo:** https://github.com/finos/devops-automation/

**Project Board:** https://github.com/orgs/finos/projects/33

**Mailing List:** Email devops-mutualization+subscribe@finos.org to subscribe to our mailing list