The Open Group Amsterdam Summit 2025 Security Forum Members’ Meeting

Objective of Meeting

The Security Forum Members’ Meeting at The Open Group Amsterdam Summit 2025 had the following goals:

• Determine the relationship among Standards and supporting guidance within the emerging Security and Zero Trust Body of Knowledge
• Consider several proposed Projects and their value within broader Security Forum activities and publications

Summary

The Security Forum Members’ Meeting focused on discussion of published content by the Forum and their interactions. These documents included:

• Open FAIR™ Body of Knowledge
  • The Open Group Standard for Risk Analysis (O-RA)
  • The Open Group Standard for Risk Taxonomy (O-RT)
• Open Information Security Management Maturity Model (O-ISM3)
• Security Principles for Architecture Standard
• Zero Trust Commandments Standard
• Zero Trust Reference Model Snapshot, Version 1.0

This discussion was intended to inform the in-development Security and Zero Trust Body of Knowledge that describes how these standards and other in-development deliverables work together.

The meeting also emphasized the value of Cyber Risk Quantification (CRQ) in informing business decision-making and aligning security risk to enterprise risk management activities, as well as areas of overlap with other Forums and Work Groups of The Open Group, including the Digital Portfolio Work Group, IT4IT™ Forum, Architecture Forum, ArchiMate® Forum, and SOSA® Consortium.

Outputs

Security Forum Members will work to finalize documents for publication by The Open Group 4Q2025 US Summit, deliberately ensuring harmony among them as the Security and Zero Trust Body of Knowledge is formalized.

Next Steps

Security Forum Members will devote required time to existing Projects and activities to ensure they progress as planned and will determine forming additional Projects to address new deliverables.

Links

• Modern Supply Chain Security for Trusted Technology Providers
  Andras Szakal, CTO & VP, The Open Group
• Security and Zero Trust Body of Knowledge
  John Linford, Security Portfolio Forum Director, The Open Group 
  Tony Carrato, Invited Expert, Security Forum Elderly Security Statesman
• Cyber Risk Quantification (CRQ): An Introduction to the Open FAIR™ Body of Knowledge
  John Linford, Security Portfolio Forum Director, The Open Group
• Actionable Zero Trust and DevSecOps for Leaders and Practitioners
  Nikhil Kumar, Zero Trust Architecture Working Group Co-Chair 
  Hasan Yasar, Vice Chair Security Forum, The Open Group
• Actionable Zero Trust – Cybersecurity for the Digital Enterprise
  Nikhil Kumar, Zero Trust Architecture Working Group Co-Chair
• Secure by Standards
  Jon Johnson, NASA SEWP