• Overview
• Details
• Upcoming
  • Ongoing efforts
• Completed

Note: TAG-Security was rebranded from SAFE working group. The below roadmap includes SAFE WG and TAG-Security in its timeline.

1. Charter the SAFE Working Group. Draft vision, process and initial members (done, see below)
2. Discover (Completed)
   • Explore the problem space of the working group
   • Investigating what is happening in the community today with respect to security for cloud native applications and infrastructure
   • Presentations from members & guests
   • Describe personas & use cases
   • Draft a picture or set of categories that will serve as a starting point for an evaluation framework
   • Solicit real world use cases and practices (and compensating controls) for projects
3. Describe (in progress)
   • Define the terminology used in the output documents, and in the community
   • Describe the current state (map) of cloud native security, which might include:
     • existing standards
     • existing open source, and proprietary, solutions
     • common patterns in use today for system that works for cloud native apps. For example:
       • Extract end-to-end view of secure access, and
       • Common layering or a block architecture
4. Identify existing security components in CNCF and projects in the CNCF landscape and catalog
   • Identify gaps and make recommendations to the community and TOC
   • Continually monitor the viability of the existing projects and update the landscape document
   • Document and disseminate best practices (provide training?)

TAG-Security strives to perform annual planning and quarterly reviews of our roadmap plans. The Roadmap planning project board for each annum is a live board and is continually updated. Boards may have cards added which indicate early concepts or needs for discovery, prior to become proposals or projects.

TAG-Security maintains a few activities as regular business. Boards tracking these items linked below.