Agenda
- Administration:
- Roll Call
- Agenda Confirmation
- Action Item Review: action item list
- Organization Updates - Director's Corner
- Staff reports and updates
- LC reports and updates
- Call for Tweet-worthy items to feed (@KantaraNews or #kantara)
- Discussion
Review and approve 63A/B SACs
Discuss approach on new GSA requirements and approve Project Plan
Initial comments on GSA Concept of Operations and Certification Process drafts. - AOB
Attendees
As of 2017-03-16, quorum is 4 of 8 (see list box below for voting members)
Meeting (did) achieve quorum
Voting
- Mark Hapner, Resilient
- Denny Prvu, Secretary
- Scott Shorter, IAWG Vice Chair
- Ken Dagg. IAWG Chair
- Andrew Hughes, LC Chair
- Richard Wilsher, Zygma
Non-Voting
- Aakash Yadav, OKTA
- José Lopez, Zentry
- Christine Abruzzi US Arlington
Staff
- Colin Wallis, KI ED
- Ruth Puente, KI Executive
Apologies
- None
Notes & Minutes
Staff Updates
Director's Corner October Report
Some highlights:
- GDPR Summit beginning of October. http://www.gdprsummit.london/
- Working on Privacy Summit and StandarsStandards. Mark Lizar is leading the effort and evaluating the feasibility to held an event in January 2019., which would be the first KI event.
- Pre-conference workshop to curtain-raise Kuppinger Cole's Consumer Identity World Tour 2017 in Paris, 27th November, where Consumer identity and Access management, UMA and Consent Receipt were presented.
Discussion
Review and Approve 63A and 63B SACs
AY asked when 63C SAC would be developed. SSH responded that the work was focused on 63A and 63B (Level 2) as immediate deliverable, in long term we plan to develop criteria for C as well.
AH added that further developments would be demand driven. The current product was developed with the intention that CSPs can be re-certified in alignment with 800-63-3, basically IAL2 and AL2. In the furturefuture, KI will be developing criteria for 63-3 AL 1 and 2, IAWL 1 and 3, 63-C.
...
SS said that as part of potential changes to the policy, we can take a proposal to ARB: Take out of each assessment what level of evidence was used, etc. more transparency when possible. CW confirmed that this is a policy decision to ARB.
SS explained that Panels 2 and 3 are Identity evidence validation string table for the different levels and Verification of identity evidence at the different levels.
AH commented that presenting the spreadsheets forms as a traceability matrix, we can demonstrate coverage to 800-63-3 requirements. Others are making mappings to the requirements of 800-63-3. KI criteria has some traceable properties.
63B
SS said that 63B was done for AL2. 63A and 63B SACs are ONLY at xAL2.
63B Only one panel, no sub-tables. Types of authenticators are reflected in groups below, there come blocks of applicable criteria that are mandatory.
...
MH seconded both motions.
Motions carried.
Discuss approach on new GSA requirements and approve Project Plan
KD commented that GSA has circulated process and procedures documents for TFS Program, ConOps and Certification Process drafts. They request to have comments back to them on these 2 documents by December 22, 2017.
...
KD proposed to create a sub-group and made a call for participants
Volunteers:
Colin W.
Andrew H.
Scott S.
...
RW commented that he reviewed the CO SAC and made a cross check with 63A and B 63B SACs. 4 or 5 tcriteria criteria could be withdrawn as they are covereded by 63A or B SAC.
...
CW encouraged the participants to take this survey as it is related to current IAWG discussion: https://www.surveymonkey.com/r/5YZ3Y9X
Next Meeting
- Date: Thursday, 2017-12-7
- Time: 12:00 PT | 15:00 ET
...