[WG-P3] P3&PAC Update

[Mark Lizar]

Hello All,

So far this is what we have for the P3 - PAC update.

The most important point to make: We are lacking a project leader/ 
editor for the Privacy Assessment Criteria.  If you are interested in  
taking this role please let us know.

Below is a draft of the PAC Update Outline,

If there is anything else that we should add to this outline, please  
append it and send back.  If we can find time we will dicuss this  
update on the call today.

Thank You,

Mark Lizar



PAC Update:

Background

The P3WG has invested a lot of effort and work in developing a  
framework for privacy relevant to identity management.  Over the last  
two years we have explored various approaches to privacy in identity  
management and after a long discovery period we collectively decided  
to develop Privacy Assessment Criteria (PAC) for FICAM and Kantara  
Certification.

The intention was to start with existing requirements which  
demonstrate market needs for a privacy framework.  Many of our other  
approaches lacked a "client" driving the requirements and the output.   
As Kantara certification and the US Gov FICAM requirements have  
progressed, this provided the needed driver to which we have responded  
with the PAC.  As a result we find ourselves in the unique position of  
leading the way in this area of privacy and identity management.   
Which, as is often the case, leaves us with many questions that have  
yet to be addressed.


Latest Update:

• New questions, and the pace of trust framework development has  
slowed our development of the Privacy Assessment Criteria.

• Excellent dialogue was had at the October F2F, high-liighting the  
need and added benefit of working with the Kantara IAWG to progress  
the PAC regarding ID management. What is clear is that privacy  
assessment criteria continues to be an actively developing area for  
Identity Management. There are many activities in the works by NIST,  
including the NSTIC effort, in which we expect to contribute.

• To date we have a draft of the PAC for FICAM, excellent comments  
provided by P3 members, a loose roadmap for the document's  
development, and a list of unanswered questions posed by the PAC  
itself during it's initial drafting. There are additional questions  
for Kantara Leadership and FICAM that we are collecting as well.

•  At this time, we are in the midst of leadership elections within  
the work group and actively seeking an editor to champion the PAC's  
full development.


TO DO:

• Provide status report on PAC current state

• Compile any additional feedback

• Publish privacy framework roadmap highlighting document development  
needs for next year

• Re-publish wiki links to discovery phase efforts

• Conduct  outreach to auditors and assessors with collateral  
detailing the value proposition of adopting privacy assessment criteria


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://kantarainitiative.org/pipermail/wg-p3/attachments/20111201/0532d17f/attachment.html