...
Non-voting participants: Andrew Hughes
Staff: Lynzie Adams
Proposed Agenda
- Administration:
- Roll call, determination of quorum
- Agenda confirmation
- Minutes approval - 2021-12-16 DRAFT Minutes
- Staff reports and updates
- International liaisons updates
- LC reports and updates
- Call for Tweet-worthy items to feed (@KantaraNews)
- Discussion:
- 2022 Workload Planning
- Any Other Business and Next Meeting Date
- Next meeting - January 13th
Meeting Notes
Administrative Items:
IAWG Chair Ken Dagg called the meeting to order at 1:00M (US Eastern). Roll was called. Meeting was quorate. Distributed agenda was confirmed.
...
Lynzie reported that the Assurance Program seems to be ramping up. Recently we've received two new applications and the ARB is currently working on
International Liaisons Updates:
Kay continues to be engaged with OSIA. Accredited assessor KUMA has informed Kay that they have personnel to do these types of assessments and would be interested in the work. Although this is a small project currently, it is a foot in the door for a larger partnership in the future. Martin suggested looking at the broader Kantara membership for others that might be interested. Kay agrees with that but further outreach cannot happen until we are further along in the process, with a signed contract.
Mark King inquired about the International Accreditation Forum. He provided the link: https://iaf.nu/en/accreditation-bodies/ to learn moreon 4 assessments. There are a number of other ACRs and applications in the works. Martin asked if the ARB was looking for additional members, potentially to help alleviate the workload. Andrew provided some background around the ARB and its make-up. They are a subset of the KIBoD. There is not a set number of ARB members and changes in make-up of the group come at the direction of the ARB Chair.
There continues to be ARB concerns with component services. Ken suggested another meeting or two with the ARB to get more direct guidance on the issues that they are having.
International Liaisons Updates:
Not much movement with the holidays occurring. The KGWG will meet again today - this is the first occasion where Canada is joining the group and it is hopefully a move toward having them rejoin as members.
LC Reports and Updates:
LC is currently setting their objectives for 2022. Once those are set, IAWG can ensure that what we do aligns with those objectives. From the last LC discussion, Ken does not see anything that IAWG does not contributing to LC objectives. We will examine this further once LC objectives are set.
Discussion:
Charter Update and Vote:
Ken reviewed the charter with the group. Richard raised concern over the current charter needing adapted to Kantara if they become an international certifying body. Because that has not been voted on by the Board yet, it is too premature to adjust the charter accordingly. Martin suggested adding this to the workload discussion. Ken added that if Kantara does pursue becoming an international certifying body, it may be necessary to dissolve IAWG in its current form and start fresh with a new charter. This will develop further as Kantara decides whether to pursue the certification or not.
Martin made a motion to approve the charter in its current form. Richard seconded the motion. The charter, in its current form, was approved unanimously. Lynzie will update the approval date and leadership names accordingly.
Chair and Vice-Chair Vote:
Ken is willing to remain chair of IAWG. Martin is willing to remain vice-chair of IAWG. Lynzie is willing to remain secretary of IAWG.
Mark Hapner made a motion to approved the 2022 leadership of the IAWG. Mark King seconded the motion. The leadership of the 2022 IAWG was approved unanimously.
Workload Planning 2022:
The following tasks were identified for 2022:
...
- Should be developing a list of priorities that we want to help influence (1st quarter)
- An internal discussion about what we’d like to see in rev. 4. We should be trying to inject those into the NIST authors before they start releasing stuff to the public.
- January Board meeting – probe Matt to see what he thinks or he could address IAWG with his thoughts on this.
- Shortcomings of rev. 3 that need to be removed from rev. 4. And what needs to be added to rev. 4. We need to keep them high enough level that they can be addressed at the management level rather than the policy level.
...
Andrew provided the report. He is taking the Board's strategic priorities and turning them into LC objectives for the coming year. Increasing member engagement is one area; money for sponsorships is another area of focus. Individual work groups will decide if they will take on the OKR model. Andrew provided an update on the status of the ISO 17065 certification. We are currently creating a business case to present to the Board.
Andrew expanded on the usual request for social media posts. With the addition of a marketing person, Kantara now has a more proactive approach to marketing. She has been reporting on what she needs to promote. A few encouragements - put it in your LinkedIn profile, showcase Kantara participation on company websites if possible. Looking for a more robust ecosystem.
Discussion:
Workload Planning 2022
There was some discussion recapping and reviewing the priorities generated in December, including minimizing the amount of time spent on reviewing/commenting other legislation and standards. Andrew suggested talking with Kay and Lynzie on how this could be turned into a paid service - primarily for private projects. Further suggesting an up front commitment of time from the work group that could be expanded on a paid basis - ultimately, signaling to the market is important. Ken agreed we can look into how this can be a more marketable service.
Discussion continued on NIST rev. 4 and any opportunity to influence prior to public release. We need an access channel to NIST and a list of topics to address. The list should be one of the first action items of 2022. Andrew suggested Kay make the semi-formal offer that we stand ready and able to provide industry perspective outside the public period. Topics might include: remote proofing, comparable controls, future authentication framework, and quantum.
Other Business:
The next IAWG meeting will be Thursday, January 6 13 at 1pm EST.
Topics for that meeting will include further discussion on workload planning for 2022We will conclude our workload planning and begin brainstorming around 800-63 rev. 4.
KIBoD moved their meetings to noon, which now interferes with this meeting. The IAWG will not meet on the third Thursday of the month due to Kay, Lynzie & Ken being in the KIBoD meeting.