[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”4.16″ da_disable_devices=”off|off|off” locked=”off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row admin_label=”row” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” pac_dcm_carousel_specific_module_num=”0″ global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.19.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
As developers learn about implementing CSAP, their feedback helps us refine the CSAP architecture and we are now publishing CSAP version 1.3.<\/p>\n
This round of changes is modest but we feel it makes the architecture cleaner and easier to understand how to implement it.<\/p>\n
Below is a summary of the key changes from version 1.2:<\/p>\n
There is no change in functionality because of this amendment but it is becoming clear that managing asset access authorizations is a core role of the authorization service and should not be a separate function.<\/p>\n
The market is showing that continuous trust validation is part of the trust engine in authentication systems that provide trust inference. The v1.3 architecture simply shows trust inference in the supporting security components. There is no change in functionality, we have simply removed what has become an unnecessary distinction.<\/p>\n
We think our new representation makes it easier to understand that CSAP is a collection of services that provide the functionality necessary for CSAP to support the 3 levels of security. The three services of authorization, authentication and the authorization rule distribution that make up the CSAP core components are now shown as services within a CSAP infrastructure shape.<\/p>\n
Similarly, we are representing the CSAP support components as seven services within an infrastructure shape (see the Visual Language<\/a> to see how Infrastructure and Services are quickly identifiable with Shapes and Icons).<\/p>\n Put those together along with a couple of new Visual Language security icons and the new CSAP Overview diagram looks like this:<\/p>\n [\/et_pb_text][et_pb_image src=”https:\/\/movielabs.com\/wp-content\/uploads\/2023\/07\/new_CSAP_overview_diagram.png” alt=”new CSAP overview diagram” title_text=”new CSAP overview diagram” show_in_lightbox=”on” _builder_version=”4.19.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.19.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”]<\/p>\n You will see that we are representing Global Security Management, that\u2019s the source of security policies that are external to the production management\/CSAP authorization set up, as a service.<\/p>\n In this diagram, production management is made up of workflow management and asset management. It\u2019s illustrative of the two broad elements of production management that drive CSAP.<\/p>\n CSAP is a zero-trust architecture for securing media production and the way to implement CSAP is to start with zero-trust. In a recent blog post<\/a> we talked about all the different things that zero-trust could mean in our production context, the various \u201czero-trust\u201d products being offered and we introduced the concept of the CSAP Zero-trust Foundation (ZTF). The CSAP ZTF is a zero-trust security model with a certain set of features necessary for building CSAP.<\/p>\n CSAP Part 5: Implementation Considerations is a living document that we plan to add to. We initially published Part 5A, 5B and 5C and with version 1.3, we have added an expanded version of the CSAP ZTF blog post to Part 5A. It\u2019s worth a read if you\u2019re sitting there wondering where to start on your CSAP journey.<\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.19.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”]<\/p>\n We hope that reading this will encourage you to read the new versions which are available both as online documents on our documentation website<\/a> and as downloadable PDF documents<\/a>. Please reach out to MovieLabs if you have any questions about how to deploy any part of CSAP at csap@movielabs.com<\/a>.<\/p>\n We\u2019ll keep adding to the implementation considerations as and when we see a need, and we\u2019ll publish the final part of the main document set, Part 6: Policy Description, at a later date.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" Including Updates and new Content in the CSAP architecture<\/p>\n","protected":false},"featured_media":13241,"template":"","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[97],"acf":[],"yoast_head":"\nCSAP Part 5A has been updated to include the CSAP Zero-trust Foundation<\/h2>\n
Keep the Feedback Coming<\/h2>\n