Attendees:
...
March 24 is the due date for all NIST comments on 800-63-4. Same date applies to PIV drafts 800-157-1 and 800-217. Please submit all comments that you would like included WITH the Kantara submission to comments_iawg@kantarainitiative.org by end of day March 9. Specific topics and questions requested by NIST can be found here.
IAWG Timeline:
March 9 - All comments must be submitted to the IAWG (comments_iawg@kantarainitiative.org) by end of day
March 16 - IAWG will share the draft Kantara Comments at the IAWG meeting for review and request any edits, changes, etc be submitted prior to the next meeting
March 23 - Final draft of Kantara Comments will be shared at the IAWG meeting. The comments will be submitted to NIST after the meeting concludes.
Feel free to use the NIST spreadsheet or it's even simpler to input comments into a similarly formatted Google Doc (link here). The Google Doc is separated into tabs for each section (base, 63A, 63B, and 63C) and we'll compile those into the official document after the March 9 deadline.
Discussion:
SAC Updates - 1440 reference issue
...
Richard moved to update the IAF-1440 as a non-material change. Mark King seconded the motion. Motion carried with no objections.
Lynzie will move forward with the updates and share with the groups mentioned above.
Revision 4
We have not received comments from anyone yet. Denny has been cumulating notes that he will format into comments but we are looking for more input for the Kantara submission. More information about the IAWG timeline and submission information is described under Assurance Updates above.
Richard is curious how NIST comments are perceived if they come from both the individual and Kantara. Will it be seen as Kantara backing up an individual or will they acknowledge if it comes from IAWG/Kantara that it represents the comments of a large group of people? Maria believes they tend to weight the responses from agencies and organizations, such as Kantara, more heavily than those of individual contributors. They weight the contributions of private sector companies somewhere in between individual and agencies. She believes anything we can agree on collectively should be included as it will carry a greater weight - but is not suggesting individuals should not send in their comments as well if desired. Additionally, the more specific the comment can be - with an alternative option - is the best type of comment and one that NIST is likely to consider. Comments need to be actionable.
Any Other Business:
IAWG leadership keeps an action item list.
All IAWG participants should be aware that the spreadsheet exists and that it lists everything we think the IAWG is working on or planning to work on. Please feel free to review it and correct it if needed - it is not our intent to overlook something!