IAWG Meeting Minutes 2013-10-31

IAWG Meeting Minutes 2013-10-31

Kantara Initiative Identity Assurance WG Teleconference

 

Meeting Minutes - Approved by IAWG 2013-11-07

 

Date and Time

Agenda

  1. Administration:

    1. Roll Call

    2. Agenda Confirmation

    3. Minutes approval: IAWG Meeting Minutes 2013-10-10

    4. Action Item Review

    5. NEW: IDESG Update from Plenary Attendees

    6. Staff reports and updates

    7. LC reports and updates

    8. Call for Tweet-worthy items to feed (@KantaraNews or #kantara)

  2. Discussion

    1. F2F November 13 2013 afternoon in DC

    2. Discussion of initial draft of Modular IAF document

    3. Discussion of flight path of IAF v4.0 timelines/expectations

  3. AOB

    1. (Placeholder for: Resilient Trust Network update; Richard Wilsher's Antecedent Theorem thread - deferred to future meeting)

  4. Adjourn

 Attendees

Link to IAWG Roster

As of 1 July 2013, quorum is 5 of 9

 

Meeting achieved quorum

Voting

  • Myisha Frazier-McElveen (C)

  • Rich Furr (V-C) 

  • Andrew Hughes (S)

  • Scott Shorter

  • Cathy Tilton

  • Matt Thompson

  •  

Non-Voting

  • Linda Goettler

  • Matt Woodhill

Staff

  •  

Apologies

  • Bill Braithwaite

  • Richard Wilsher

Notes & Minutes

Administration 

Minutes Approval

IAWG Meeting Minutes 2013-10-10

Motion to approve minutes of 2013-October-10: Richard Furr
Seconded: Scott Shorter
Discussion: None
Motion Passed

Action Item Review

See the Action Items Log wiki page

Staff Updates

LC Updates
  • No meeting this period

Participant updates
  • Andrew gave an overview of IDESG Plenary activities and IIW Conference activities of relevance to IAWG

  • Scott related Use Case group looking at Identity Proofing over video conference

Discussion

F2F Meeting Plans
  • 1 day event - November 13, 2013

    • FCCX event in the morning

    • Afternoon to showcase IAWG work - Modular IAF discussion

  • Joni to post registration site today

Modular IAF Discussion Draft
  • Andrew gave an overview of the document structure, content and next steps

  • This document will probably end up as guidance to companies seeking to offer CSP services (who does what) and guidance to Assessors on who should do what.

  • Longer term, an analysis of how the SAC match up to the listed Functions will be done, and this will be source information for a discussion on approaches to Kantara Trustmarks (should there be Function-based Trustmarks? and if so, how to manage that)

  • Target 14 November for further IAWG discussion

  • Target end of 2013 for Deployment Patterns completion

  • Need to discuss what the actual impacts will be to IAF (non-SAC and non-AAS) in Q1

    • Need to to develop strategy to determine if/how to update IAF and potentially trust mark modifications

  • In Q2 proceed on the work to non-SAC and non-AAS parts of IAF (in particular the Overview and Levels of Assurance documents)

  • Q1 discussions will allow for planning of SAC and AAS modification requirements and direction

 

AOB
  • Electrosoft has new internal employee training material on handling data breaches at assessed entities. Scott plans to sanitize it and post portions on the Electrosoft blog.

Attachments

 

 

Next Meeting