...
Assurance Program - Classes of Approval/Service Descriptors
Lynzie summarized last week’s discussion. Lynzie explained the term partial from the previous assurance program manager’s explanation – If you achieve both IAL and AAL, it is a full service. If you achieve only IAL or AAL, that is a component service. You receive either a ‘complete’ trust mark if all applicable criteria is fulfilled, or a partial trust mark if it is not. Richard said that was never the intent.
There were differing opinions on term definitions (component, full, partial, etc.). Andrew suggested we make the definitions of each clear. Kantara’s intent is that a component is 63a, 63b or 63c – each an individual component. And a full service is offering all of these components. The definition of full may need adjusted, but that was the original intent.
Michael pointed out that the word component is not found on any trust mark, while we use it as a descriptor on our Trust Status List. This is a cause of confusion.
Andrew suggested removing full since nobody has went through FAL. Rather, create a trust mark for IAL, AAL and FAL. For instance, ID.me would display the IAL and AAL trust mark rather than a full service trust mark. Would ID.me, and other similar CSPs, go for that? Richard suggested combining them into one trust mark. Approved with 1, 2, or 3 lines depending on what was approved. Lynzie will get mock-ups from Karyn. This will replace full service and list what exactly you are approved for.
Any Other Business
We will be honoring Ken Dagg in an upcoming meeting with the honorary title Emeritus Chair of the IAWG. A few in this group made the request and pushed for his service to be formally acknowledged with the title. An award and certificate have been prepared. The date, if known in advance, will be announced to the group and the presentation will happen at the start of that meeting.