[KI-LC] LC report to the AGM for 2017 - draft

Andrew Hughes andrewhughes3000 at gmail.com
Sun May 13 05:39:47 UTC 2018


December 2017

I included mention of some work that was done except for approvals - I
thought that the IAF work was just a bit too far into 2018

I’ll consider adding it in for the plenary part

On Sat, May 12, 2018 at 6:28 PM Ken Dagg <kendaggtbs at gmail.com> wrote:

> Andrew,
>
>
> What’s the end date for your report?
>
>
> If it’s up to the end of April 2018 I’d suggest adding the work IAWG did
> with respect to 800-63-3.
>
>
> *IAWG developed:*
>
> IAF1430 - 63A_SAC at IAL2
>
> IAF1440 - 63B_SAC at AAL2
>
> IAF1410 - repackaged current CO_SAC
>
> IAF1420 - repackaged current OP_SAC
>
>
> *Three Classes of Approval*
>
> Classic: uses CO_SAC + OP_SAC NIST (based upon SP 800-63 rev.2) and US
> Federal Privacy Criteria (optional) at LoAs 1, 2, 3 & 4, as described in
> OMB M-04-04
>
> NIST 63-3 rev.3: uses CO_SAC at AL3 + 63A_SAC + 63B_SAC at IAL2 & AAL2 (only)
>
> NIST 63 rev.3 (Technical): uses 63A_SAC + 63B_SAC at IAL2 & AAL2 (only)
>
>
> Do you want to include the comments IAWG prepared on behalf of Kantara for
> NIST and for OMB?
>
>
> Ken
>
>
>
> On Sat, May 12, 2018 at 4:25 PM Andrew Hughes <andrewhughes3000 at gmail.com>
> wrote:
>
>> Hi LC - I've whipped up a short report about what we were up to in 2017 -
>> I will be presenting this at the AGM on Monday May 14 in Munich.
>>
>> If you see anything missing or incorrect, please let me know & I'll fix
>> it up!
>>
>> thanks
>> andrew.
>>
>> *Andrew Hughes *CISM CISSP
>> *In Turn Information Management Consulting*
>>
>> o  +1 650.209.7542
>> m +1 250.888.9474
>> 1249 Palmer Road, Victoria, BC V8P 2H8
>> AndrewHughes3000 at gmail.com
>> ca.linkedin.com/pub/andrew-hughes/a/58/682/
>> *Identity Management | IT Governance | Information Security *
>>
> _______________________________________________
>> LC mailing list
>> LC at kantarainitiative.org
>> https://kantarainitiative.org/mailman/listinfo/lc
>>
> --
> Kenneth Dagg Independent Consultant Identification and Authentication
> 613-825-2091 kendaggtbs at gmail.com
>
-- 

*Andrew Hughes *CISM CISSP
*In Turn Information Management Consulting*

o  +1 650.209.7542
m +1 250.888.9474
1249 Palmer Road, Victoria, BC V8P 2H8
AndrewHughes3000 at gmail.com
ca.linkedin.com/pub/andrew-hughes/a/58/682/
*Identity Management | IT Governance | Information Security *
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kantarainitiative.org/pipermail/lc/attachments/20180512/8565735d/attachment-0001.html>


More information about the LC mailing list