/
IAWG Meeting Minutes 2013-10-03

IAWG Meeting Minutes 2013-10-03

Oct 10, 2013

Kantara Initiative Identity Assurance WG Teleconference

1 Date and Time | 2 Agenda | 3  Attendees | 4 Minutes Approval | 5 Action Item Review | 6 Staff Updates | 7 Discussion | 8 AOB | 9 Attachments | 10 Next Meeting

 

Meeting Minutes - IAWG approval 2013-Oct-10

Date and Time

Agenda

  1. Administration:

    1. Roll Call

    2. Agenda Confirmation

    3. Minutes approval: IAWG Meeting Minutes 2013-09-26

    4. Action Item Review

    5. Staff reports and updates

    6. LC reports and updates

    7. Call for Tweet-worthy items to feed (@KantaraNews or #kantara)

  2. Discussion

    1. IAWG Charter endorsement

    2. November 10-11 F2F Plenary in Vancouver - IAWG work?

    3. Review latest draft material on 800-63-2 v SAC mapping

    4. IAF Publication Schedule / numbering

  3. AOB

    1.  

  4. Adjourn

 Attendees

Link to IAWG Roster

As of 1 July 2013, quorum is 5 of 9

Meeting achieved quorum

Voting

  • Myisha Frazier-McElveen (C)

  • Rich Furr (V-C)

  • Andrew Hughes (S)

  • Scott Shorter

  • Richard Wilsher

  • Cathy Tilton

Non-Voting

  • Kenneth Myers

  • Matt Woodhill

Staff

  •  Joni Brennan

Apologies

  • Patricia Hammar

  • Matt Thompson

  • Ken Dagg

Notes & Minutes

Administration 

Minutes Approval

IAWG Meeting Minutes 2013-09-26

Motion to approve minutes of 2013-09-26: Rich Furr
Seconded: Scott Shorter
Discussion: None
Motion Passed 

Action Item Review

See the Action Items Log wiki page

Staff Updates

LC Updates

  •  

Participant updates

Discussion

Agenda was sidetracked to discussion of a specific issue with CO_ISM#090 which consumed the meeting time.

Discussion of 800-63-2 v SAC Mapping drafts

  • Question of why 800-63-2 is the only mapping being considered? Should include 800-53 and also requirements of TFPAP.

    • If this is not done, then there might be future issues with the SAC - because 800-63 only refers to Identity Proofing topics, it refers to 800-53 directly. This might result in conflicts between IAF and TFPAP.

    • Concern that this would result in a US-Centric IAF

 

  • Example given is the requirement for (CO_ISM#090) External Audit bi-annually. 

    • This is not required in 800-63. tScheme requires it. Currently this requirement is scheduled for removal in SAC v4.0 - view is that this will put Kantara's assessment program at risk. It should remain in the SAC.

    • The AAS covers the 3rd Party nature of Kantara Assessments - this was what was approved by TFPAP originally.

    • The argument for removal: the Kantara Assessment itself is by definition an independent audit - so having it as a criteria is redundant and potentially confusing.

  • Note made that it is helpful to include criteria like this even if they appear to be redundant - because of the complex inter-dependencies between the SAC and several other documents. It is very complex if the Assessor/Assessed need to jump between many documents - could easily cause important criteria and requirements to be missed.

  • Discussion about alignment with 27001 relative to frequency of 3rd party audits - it is unclear what the resolution is. 

    • FICAM gives the example of a 3 year independent audit cycle, but 27001 is annual for certification.

  • ACTION: Richard Wilsher will submit a ticket for CO_ISM#090 removal. Richard & Rich will prepare discussion points on CO_ISM#090 for a vote on next IAWG call.

  • ACTION: Discuss timetable for moving the IAF v4 to Public Review stage at next call

IAWG Draft Charter endorsement

The 2013 IAWG Charter Final Draft is here: 2013 IAWG Charter Refresh - Final Draft September 30 2013

Deferred

November 10-11 Plenary Planning

Deferred

IAF Publication Schedule

Deferred

AOB

 

Attachments

 

 

Next Meeting