IAWG Meeting Notes 2012-03-07
Attendees:
Scott Shorter
Richard Wilsher
Nathan Faut
Ben Wilson
Myisha Myisha
Linda Goettler
Bill Braithwaite
Rich Furr
Apologies:
Patrick Curry
Staff:
Anna Ticktin
NOTES:
1. ADMINISTRATIVE:
- Roll Call — quorum not achieved
- Motion for minutes approval: 22 Feb 2012
2. SAC Restructuring – Richard Wilsher
- (Documents sent via list on 03/06/2012)
- Presentation can be found here: http://kantara.atlassian.net/wiki/display/idassurance/KI-IAF+SAC+v3.0+Proposal
Current structure of the SAC:
- CO-SAC
- ID-SAC at 4 LoAs
- CM-SAC Six parts, each at 4 LoA
- Proposed SAC v3.0: CO SAC Stays the same whilst OP-SAC consolidates ID- and CM-SAC at 4 LoA
Affected IAF Documents:
- SAC — Criteria to be met (to become v3.0)
- AAS — Process to be applied (must be updated now with version 3). Full service must ensure components address 100% of the OP SAC.
- RAA — Rules to be observed (In addition, point vs. period of time audit rules may live here)
- Approval Application
- S3A — (not yet created) Specification of a Service Subject to Assessment
- SoC — Statement of Conformity (not a proforma, but rather a requirement that could be embedded somewhere in another doc...)
- Though not quorate, those present at this meeting agreed in principle that the proposals were necessary and appropriate and that they should be prsecuted as a single thread, rather then being intermixed with other pending changes to the IAF documentation suite.
3. F2F MEETING
- The IAWG and P3 will entertain a joint session at the Munich F2F on Friday, April 13, to discuss the Privacy Assessment Criteria doc currently being drafted by P3WG.
4. AOB