Kantara Initiative Identity Assurance WG Teleconference
Meeting Minutes - Approved by IAWG 2013-11-07 |
Date and Time
Agenda
- Administration:
- Roll Call
- Agenda Confirmation
- Minutes approval: IAWG Meeting Minutes 2013-10-10
- Action Item Review
- NEW: IDESG Update from Plenary Attendees
- Staff reports and updates
- LC reports and updates
- Call for Tweet-worthy items to feed (@KantaraNews or #kantara)
- Discussion
- F2F November 13 2013 afternoon in DC
- Discussion of initial draft of Modular IAF document
- Discussion of flight path of IAF v4.0 timelines/expectations
- AOB
- (Placeholder for: Resilient Trust Network update; Richard Wilsher's Antecedent Theorem thread - deferred to future meeting)
- Adjourn
Attendees
Link to IAWG Roster
As of 1 July 2013, quorum is 5 of 9
Voting
- Myisha Frazier-McElveen (C)
- Rich Furr (V-C)
- Andrew Hughes (S)
- Scott Shorter
- Cathy Tilton
- Matt Thompson
Non-Voting
- Linda Goettler
- Matt Woodhill
Staff
Apologies
- Bill Braithwaite
- Richard Wilsher
Notes & Minutes
Administration
Minutes Approval
IAWG Meeting Minutes 2013-10-10
Motion to approve minutes of 2013-October-10: Richard Furr
Seconded: Scott Shorter
Discussion: None
Motion Passed
Action Item Review
See the Action Items Log wiki page
Staff Updates
LC Updates
Participant updates
- Andrew gave an overview of IDESG Plenary activities and IIW Conference activities of relevance to IAWG
- Scott related Use Case group looking at Identity Proofing over video conference
Discussion
F2F Meeting Plans
- 1 day event - November 13, 2013
- FCCX event in the morning
- Afternoon to showcase IAWG work - Modular IAF discussion
- Joni to post registration site today
Modular IAF Discussion Draft
- Andrew gave an overview of the document structure, content and next steps
- This document will probably end up as guidance to companies seeking to offer CSP services (who does what) and guidance to Assessors on who should do what.
- Longer term, an analysis of how the SAC match up to the listed Functions will be done, and this will be source information for a discussion on approaches to Kantara Trustmarks (should there be Function-based Trustmarks? and if so, how to manage that)
- Target 14 November for further IAWG discussion
- Target end of 2013 for Deployment Patterns completion
- Need to discuss what the actual impacts will be to IAF (non-SAC and non-AAS) in Q1
- Need to to develop strategy to determine if/how to update IAF and potentially trust mark modifications
- In Q2 proceed on the work to non-SAC and non-AAS parts of IAF (in particular the Overview and Levels of Assurance documents)
- Q1 discussions will allow for planning of SAC and AAS modification requirements and direction
AOB
- Electrosoft has new internal employee training material on handling data breaches at assessed entities. Scott plans to sanitize it and post portions on the Electrosoft blog.
Attachments
Next Meeting