Attendees:
...
- SS is adding more content to the Google Sheet. Also, Jose Lopez has added his comments.
Comments on OMB policy draft
- RP commented that as the compilation of comments is now structured, it is available in Google Doc so all those who want to contribute can make edits directly or add new comments. Link to the compilation of comments: https://docs.google.com/document/d/1w94ZJLBSZsE9LwPKpsaGgyS5ZnRAGX2fEMe0-CPbAEM/edit?usp=sharing
- KD said that the Plan for Thursday May 3rd is to review a new draft of the compilation of comments. Ken encouraged IAWG to submit the comments to Ruth or add them directly to the Google Doc.
- For the final submission individual attribution will be removed and will go as Kantara comments and suggestions.
- CW asked the participants to provide feedback on the introduction that he drafted.
- Action item: Ken and Colin to work on their comments under the section "Agency Adoption of ICAM Shared Solutions and Services" as they are contradictory. CW said that they seem to have different interpretation of "shared services". KD commented that he will clarify his assumption of "shared services", as he assumed that included private sector, such as CSPs. He added that he will stress that private sector/CSPs need to be considered as shared services.
- Jim Fenton clarified that in the document "shared services" refers to those like login.gov, a shared authentication provider, public sector shared service. But he also pointed out that there are places in the document where it is encouraged the development of multiple identity and authentication shared services in both private and public sector.
- Jim Fenton added that he is also preparing comments and they are focused on:
1) Make sure the document is structured in a way that equally encourages private and public sector identity and authentication services.
2) Responsibilities to GSA control system in GSA Responsibilities - item 6 . Physical access control system. It probably need to be removed, physical access control. It Physical Access Control System (PACS). PACS probably needs to be removed or it needs to say something more than access control because it can´t rely on 800-63-3 for that.
3) DHS support to that Program as well. CDM program Add a responsibility for DHS - support Continuous Diagnostics and Mitigation (CDM) Program.