Operationalization

Status and next steps

Ā 

Current Status: MoU under IDESG Board consideration and legal review.Ā 

Updated docs.

MeetingsĀ 

Ā 

2017-05-18 Draft Meeting Notes

2017-04-26 Draft Meeting Notes


Previous considerations:

-Include Kantara onboarding in the Statement of Work for the next version of the IDEF Registry web site.
-The form that recognition of Kantara-approved CSPs during the IDEF registration process still needs to be decided. If it canā€™t be an interactive experience (due to site-development budget issues), it could at least be a static presentation in HTML or PDF.
-Once we get the above going, part of the process would be that Kantara-approved CSPs initiate registration and get a ā€œpassā€ on the ā€œFully Compliantā€ items, then they will attest to the remaining IDEF Baseline criteria. Finally, they will need to accept the standard terms and conditions and submit a complete package (attestation form).
-In relation to the HTML/Static representation, KI suggested following the example of our Trust Registry: https://kantarainitiative.org/trust-registry/ktr-status-list/


April 3rd Meeting Notes: Ā 

  • Ā We discussed that once a CSP is approved at Kantara, in essence they will be offered the opportunity to self attest at IDESG.
  • They will choose one of 2 URLs. One URL is pre-filled with boxes ticked if they have done Kantara's 1400 SACs approval.
  • The other URL is pre-filled with boxes ticked if they have done Kantara's 1400 SACs approval AND the FICAM Privacy Profile.
  • IDESG will queue up the URL/web work on its upcoming work order.
  • The URLs will be hosted by IDESG. If required by IDESG, they will ask Kantara to validate that a CSP has been approved.

Ā Action items:

  • Ā Ben will fill in the last remaining empty boxes on the compare tool to complete the mapping.
  • Colin will use a Kantara MOU template to strawman up the broad approach.


IDESG and KI call to discuss the IDEF-SAC mapping March 10th.

Ā Meeting Notes:

  • Andrew and David recounted the approaches used by each team to analyse, review and comment on the mapping
  • We looked at each item that TFTM had further questions about, notes on each one follow:Ā 
    1) INTEROP-2 - Kantara should indicate in the S3A that if the CSP intends to apply for IDEF Registry listing that they include an answer to INTEROP-2 in their S3AĀ 
    2) INTEROP-3 - this is a trigger on IDESG side - if an applicant to the Registry is using a non-listed standard this should trigger IDESG to put the standard through the normal evaluation processĀ 
    3) PRIVACY-3 - Kantara should review data minimization criteria to see where this is handled - ā€œPartialā€ might be possible instead of N/AĀ 
    4) PRIVACY-15 - The IDEF requirements is relevant to the transaction. David explained the context that he expects -> Data Minimization. Andrew requested that IDESG review and update their requirement and supplemental guidance for P15. David noted that there is no supplemental guidance for the Privacy requirements.Ā 
  • ACH asked David to send info to Kantara about how other CSPs have done this and Kantara can recommend to CSPs.