Welcome to our regular roundup of events and activities in and around AMTSO.
Meetings and Events
A preliminary agenda for our Dublin meeting in late September/early October has been posted to our member site. Members planning to attend the meeting are urged to complete the registration form to confirm their attendance. The agenda includes a planned discussion session looking at internal testing and QA within security firms, to share insights and experience and find potential ways AMTSO can help improve resilience. Any member representatives keen to join the panel for this session should contact [email protected] for more info. Guests will be invited to join the event for day 2, any non-members who would like to attend and hear more about AMTSO and our community can also contact [email protected] to request an invite.
XDR Working Group
Our XDR project team met again this week, with limited response so far to our ongoing survey on XDR solution components we have carried out another round of outreach to vendors active in the space over the last few weeks, covering both members and non-members, and the team has now set up a tracking system to manage the next stages of gathering intel from publicly available sources, in cases where vendors have not yet provided their own internal input. Members of the team have been assigned sets of solutions to review and pull together data on. We plan to complete this project by early September and will check in with each affected vendor to confirm our findings prior to discussing the outcomes at our Dublin event and publishing the final data. The team will then move on to developing formal guidance and criteria for testing such solutions.
Sandbox Evaluation Working Group
Our sandbox paper remains open for feedback, comments are being gathered and will be reviewed and actioned as appropriate from early September, ahead of putting the final paper up for member vote to adopt. Outreach to non-members with an interest in the area continues.
VPN Working Group
Our VPN group held its first call last week, the team is now working to fill out an initial set of basic points to build it into a full guidance paper. We expect to complete this work through mid-September and have a working draft ready for member review in Dublin. In parallel, the initial points are being shared outside the membership to gather further feedback and insight.
RTTL Working Group
The RTTL team held a call last week, several new participants have been signed up and are trialling their feed systems or beginning to submit to both RTTL and ThreatList. We expect to run another round of recruitment into the system during and around our Dublin events in a few months.
AMTSO Standard and Test Calendar
New tests added to our Test Calendar in recent weeks include Q2 endpoint reports from SE Labs covering home, small business and enterprise solutions. Q2 updates from MRG Effitas on both Windows and Android are expected shortly. Here’s a summary of recent activities from our Standard compliance team:
- AMTSO Compliance Confirmation Report covering the March, April, May, and June 2024 VB100 Test Reports as part of their 2024 Test Series (AMTSO-LS1-TP095) was issued on Monday, July 29th, 2024. The Phase 2 Commentary period on this test cycle closed on Friday, July 26th, 2024.
- Phase 2 Commentary Collection covering the SE Labs Q2 2024 Endpoint Protection Test (AMTSO Test ID: AMTSO-LS1-TP113) was launched on Tuesday, July 30th, 2024 and will remain open through Wednesday, August 7th, 2024.
Information on all published and upcoming tests being tracked by AMTSO can be found in our test calendar.
Finances and Membership
An update on our financial status has been prepared and shared with internal leadership, a full report will be provided to members at our Dublin event. We have several new membership applications open or expected shortly, and we continue to welcome new members into our community, information on membership can be found here: https://www.amtso.org/joining-amtso/
Summer break
With much of our team taking some time off over the summer, there will be a pause in our updates for a few weeks, we expect to restart in late August/early September, with the next Board meeting scheduled for the first week of September and more additions to our agenda for Dublin planned for release shortly thereafter.
ABOUT THIS NEWSLETTER
We send this newsletter to all AMTSO member representatives, as well as non-members who have engaged with AMTSO recently and have an interest in what’s going on in the AMTSO community. If you have any friends or colleagues who would like to be kept informed of developments in the testing world, they can sign up here. If you’d like to know more about joining the AMTSO community, there’s information and an application form here.