Attendees:
Voting Participants: Ken Dagg, Martin Smith, Mark Hapner, Mark King
Non-voting participants: Jimmy Jung, Roger Quint, Varun Lal
Staff:
Agenda:
- Administration:
- Roll Call and quorum determination
- Agenda Confirmation
- Minute approval (DRAFT minutes of 2021-07-15)
- Staff reports and updates
- LC reports and updates
- Call for Tweet-worthy items to feed (@KantaraNews)
- Discussion
- Finalize proposed criterion language regarding "comparable alternative controls."
- Finalize proposed text (if any) regarding use of "presentation attack detection" (PAD.)
- Confirmation of other non-substantive changes to criteria to be included in the package to be submitted.
- Finalize proposed criterion language regarding "comparable alternative controls."
- Any Other Business and Next Meeting Date
Meeting notes:
Administrative items:
IAWG Chair Ken Dagg called the meeting to order at about 1:05PM (US Eastern), and called the roll. It was noted that the meeting was quorate.
Minutes approval: Mark King moved approval of the draft Minutes of the IAWG meeting of July 29. Mark Hapner seconded. The minutes as distributed were approved unanimously.
Staff reports and updates: ED Kay Chopard – did reach out to the UK government contact on the request for comment (not the official title) that the UK has sent out. I saw that they've updated it and I'm not sure if the update addresses your questions about certifications.
The UK government person is on holiday but she did respond to me and promised to get back to me later this month to talk more about what they are doing and planning.
Also just finished a conversation with a government official in Australia. I know that he was working with Colin already about leveraging our assurance program for what they need in Australia rather than requiring companies to do duplicate assurance processes for each company. I have to get up to speed on that as well but he was very supportive so I will also contact Phil Lam to figure out some next steps and what needs to get resolved.
LC reports and updates:
Not met. Nothing to report.
Ken reminded WG participants that Kantara staff is ready to help them publicize their newsworthy activities via the @KantaraNews Twitter handle. Requests can be sent to Ken D or Kay C.
Discussion:
Finalize proposed criterion language regarding "comparable alternative controls."
JJ's more; RQ says "make available" is good language. MK: though he was asking for more. ; RQ: meant inform and make available. MS: how? RQ: mechanism – maybe included in our notice of the review.? MK: wonder if KI needs to send a separate communication on this point. "Make available" should be enough. KD: shouldn't make it hard or obscure. If we "inform", that makes a record. ?? What about component services? KD: the CSP is the client.
Language: in (f) "Inform, directly or through a direct link, services clients" 63(a) 177 ref "or uses comp alt via a component service>
For Component services: CSP is using the CSP. "or uses a component that does"
KD: if a CSP makes a subst change they must inform the ARB. Component switch would be a significant change. MK: I would not consider that subst, necessarily.
RQ: we want to foster competition in the market.
KD: close off. 2 changes to be sent to Richard
Finalize proposed text (if any) regarding use of "presentation attack detection" (PAD.)
Confirmation of other non-substantive changes to criteria to be included in the package to be submitted.
Other Business:
Next Meeting: August 26. In addition to the items noted above related to finalizing the criteria change package, we hope to get a report from ED Kay C. on her outreach to her contact at the the UK Digital Identity program. \
Ken adjourned the meeting at about 2:05PM US Eastern.