IAWG Bi-Weekly Meeting Minutes - 2010-03-17

Attendees:

• Frank Villavicencio
• Ken Dagg
• Myisha Frazier-Mclveen
• Shin Adachi
• Colin Soutar
• John Bradley
• Ben Wilson
• Lena Kannappan
• Pete Palmer
• Rich Furr
• Bob Pinheiro
• David Wasley

1. Roll call

As indicated above.

2. Find a volunteer to take meeting notes

Ben Wilson of DigiCert volunteered to take minutes.

3. Approve meeting notes from our last call

- (all past minutes can be found here http://kantarainitiative.org/confluence/display/idassurance/Meetings+and+Minutes)

Quorum did not exist at beginning of meeting, so this matter was postponed.

4. Discuss option to hold weekly meetings

- for the next few weeks (rather than bi-weekly)

Frank suggested that meetings be held weekly to address the role of the IAWG with the identity proofing standards work of other organizations (e.g., the ANSI Identity Theft Prevention and Identity Management Standards Panel (IDSP), the North American Security Products Organization (NASPO), the ABA ID and STORK in the EU, among others).

5. Brief update on KI’s ICAM submission (Joni and Frank)

Frank and Joni announced that the ICAM submission had received conditional approval for identity assurance to be provided by CSPs at Levels 1, 2 and 3 non-PKI. Three changes were requested by ICAM: 1) add the word “Privacy” back into the title, 2) modify “change of address” to a more generic reference for non-personal information, and 3) annotate the table in the Level of Assurance document to make it more clear that the examples are just that and are not actually requirements so that they are not taken or used out of context. Joni mentioned that approval needed to be provisional because the ICAM continues to work on some of its own internal requirements.

6. Salient points resulting from the KI in-person sessions of last week (Joni)

Joni noted that the recent meeting in Portland was very productive and successful. The eGov profile progressed well with the eGov WG and the P3WG met as well as the User Managed Access and Board of Trustees. One of the primary topics was the need to improve Kantara messaging, communication and marketing.

7. Status of IAF documents:

1. January-closing cycle: Comment resolutions (Colin's updated version posted here: http://kantarainitiative.org/confluence/display/idassurance/IAF+Review+Comments+-+Close+Jan+22) and any follow up discussions. Please review the proposed changes and be ready to discuss them. We are looking to push forward and try to submit the final version for publication shortly thereafter.

Joni acknowledged that a quorum was now present.

The IAWG discussed the resolution of comments to the Identity Assurance Framework: Overview (Kantara IAF-1000-Overview). It was the general consensus that the comments had been adequately addressed in the proposed draft. There was recognition that the current set of documents focuses on U.S. Federal requirements and NIST SP 800-63 and that future versions will need to address identity assurance from international and non-governmental perspectives.

It was recommended that Section 2.7 and editorial commentary notes (approximately three) be taken out for submission for All Member Ballot by the Leadership Council.

Whereupon, a motion was made by Frank to publish Kantara IAF-1000-Overview v. 0.4 (as amended after excising Section 2.7 and editorial commentary) for submission to an All Member Ballot by the Leadership Council.

The motion was seconded by Ben Wilson and was adopted unanimously by the quorum then present.

2. February-closing cycle: these were related to the Assessor Qualifications and Requirements (http://kantarainitiative.org/confluence/download/attachments/38371432/Kantara+IAF-1600-Assessor+Qualifications+and+Requirements.pdf), and we received no comments.

Time did not allow for any discussion on this topic. (Joni – Is this right? Or did we vote approving this as well?)

8. Reconcile and decide on how to proceed regarding recent ID Proofing discussions:

As a continued discussion related to 4) above, it was decided that next week at the same day and time (Wednesday, Mar. 24, 2010, 8 PDT | 11 EDT | 16:00 UTC), an interim teleconference (not counted toward determining voting eligibility) would be held. The topic of discussion would be the role of the IAWG and its members in contributing to identity proofing standards being developed or considered by other organizations. Frank asked Rich Furr to moderate next week’s discussion.

9. Time did not allow for:

- FORG review of updated doc from Rich Furr
- Discussion on graphical explanation of IAF accreditation and certification process (attached image courtesy of Paul Madsen) – should we formalize a diagram like this as part of our documentation?
- Any other business

Adjourned.