Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Administration:
  2. Roll Call
  3. Agenda Confirmation
  4. Action Item Review: action item list
  5. Staff reports and updates - Director´s Corner
  6. LC reports and updates
  7. Call for Tweet-worthy items to feed (@KantaraNews or #kantara)
  8. Discussion

a.  Questions about the revised IAF Overview (IAF 1000) v2.3.2 (attached): 

1. What is the Relationship / Difference between Schemes and Classes of

...

Approval? Which includes?, how does Scheme Owner differ from Trust Framework Provider?

...

2. Should the Glossary be rolled into the Overview?

3. Does the IAF cover more than just online solutions?


Quorum 

The Chair decided that due to the long absence of Denny Prvu in the meetings, he will no longer be a non-voting participant, so the quorum changed. The current quorum is 4 of 7. 

...

  • CW said that including offline solutions would make the scope too wide. 

  • RW commented that it would be though tough to adjust the criteria to offline solutions. 

  • SS added that IAF addresses Electronic credentials but you access to online solutions. 

  • KD said he will consider make making the overview broader in scope and narrow as well.

...

  • RW shared a link to definitions on ISO/IEC 17067: https://studylib.net/doc/5379675/introducing-iso-iec-17067-2013 
    -Definition of Certification scheme, in Kantara case would be services instead of products, so it would read: “certification system (3.1) related to specified [services], to which the same specified requirements, specific rules and procedures apply” 
  • RW suggested to adopt document alignment with ISO 17067 as we can see KI IAF in light of this generic description of a certification scheme. IAF is eligible of ISO accreditation. KI describes classes of approval in the context of IAF and certification scheme managed by KI, which in the future could operated by KI as a Certification bodyBody. He added that if KI wants to offer a Privacy assurance framework, it would be a different certification scheme because it would need different requirements and procedures. 
  • RW clarified that when ISO 17065 when it talks about product products it also talks about services and systems, there is guidance in Annex B, how you interpret this doc. when you are offering a service. 
  • Link to ISO 17065: https://www.atlanticcertifiedorganic.ca/isoiec17065_ed1.0_en.pdf
  • RW commented that ISO 17065 is normative but ISO 17067 is a guidance doc. Ken Concern First time readers Remove the term scheme IAF contain rules, procedures, etc to do something. Approval. We can change our use of terms without telling. Doiretiorn of accreditation body. We did not use certification  
  • KD said that he is concerned about the understanding of first time readers if we add this terminology. 
  • CW added that we have not used "certification" because we are not a Certification body in ISO, so it was decided to use "Approval" instead of "Certification" when referring to Kantara Trust Services. Accredited certification body. Introduce certification terms, without knowing what it implies. RW Glossary: certification: A The direction is to become an Accredited Certification Body in the future.
  • RW suggested to add definition of certification in the Glossary: It could be defined as "a formal process of granting recognition. Next release. Provide a new release middle end of January". 
  • KD said that the next revised draft would be available middle or end of January. 


New Agenda Item by RW - 63A_SAC revision

  • RW commented that there are some issues/problems when applying a set of 63A criteria. For example: in person proofing requirements are not clear in the KI criteria.
  • Criteria that need revision: 63A_360 to 390. RW proposed revision to the text to give better context. 
  • IAWG needs to clarify the criteria and add specific context, otherwise people thinks they are broadly applicable.  
  • RW will forward to the group new text for consideration.