September 2017 - ICANNSecurity-SSR2-RT

Re: [Icannsecurity-ssr2-rt] Action Required - Please advise today - Doodle Poll Results - for SSR2 - ICANN SSR
by Boban Krsic Sept. 29, 2017

Sept. 29, 2017

Dear Yvette, all, Hope all is well? I would propose to schedule the call for Monday 19:00 UTC. Unfortunately, I will not be able to attend, due to my flight to Brussels. CENTR is organizing a 3-day workshop with European ccTLD’s. If we don’t get any information from the board relating our scope we should reschedule the planned call and adress this issue in the plenary call on Tuesday. Thanks a lot! Wishing all a relaxing weekend. - Boban. > On 29. Sep 2017, at 22:41, Yvette Guigneaux <yvette.guigneaux(a)icann.org> wrote: > > Hi Boban – below are the results from the doodle poll for the second strategy phone call for ICANN SSR – looks like Monday 19:00 UTC on 2 October is the popular date for the call – how would you like to proceed? Please advise. > > <image002.jpg > Kind Regards, > Yvette Guigneaux > (MSSI) Multistakeholder Strategy & Strategic Initiatives > Projects & Operations Assistant. > > ICANN – Internet Corporation for Assigned Names and Numbers > Email: yvette.guigneaux(a)icann.org > Cell: +1-310-460-8432 > Skype: yvette.guigneaux.icann > www.icann.org > > <image001.png> > > > > > > > > >

2 2

A new Novartis Secure Mail message is waiting for you - please register to receive it
by Novartis Secure Mail Postmaster Sept. 29, 2017

Sept. 29, 2017

Dear icannsecurity-ssr2-rt(a)icann.org,You have received a further Secure Mail message from the Novartis Associate james-1.gannon(a)novartis.com . In order to get it you need to follow the instructions sent in the e-mail with subject ' Please register for the Novartis Secure Messaging Services '. Sincerely, SecureMail Postmaster https://securemail.novartis.com

2 1

Compliance question from James
by Jennifer Bryce Sept. 29, 2017

Sept. 29, 2017

Hi ICANN SSR team, Below is a request for information that James submitted on the SSR implications of the .avianca tld https://www.icann.org/uploads/compliance_notice/attachment/957/serad-to-rey…<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_uploads_…>. Posting to the list so that everyone can see the response. We will also update the tracker accordingly. Question: When and where do the decisions on enforcement of non-compliance get evaluated for SSR impact (in this case where a gTLD is AWOL but for months no actual action is taken) Response: “The question is viewed in 2 parts – the first is the Compliance role and responsibilities which we can address below and the other is the decision to invoke an EBERO event, which should be addressed by the EBERO team. Compliance work is focused on bringing the registry operator into compliance and addressing the issues that led to non-compliance. Once there is a non-compliance issue, ICANN Contractual Compliance enforcement decisions are based on the contractual obligations. The SSR impact of non-compliance for critical registry functions, as defined in the contract, have previously been evaluated in the determination of Specification 10 (Registry Performance Specification) and EBERO requirements. ICANN continues to work with .avianca in an effort to bring the registry operator into compliance. The EBERO team is responsible for the evaluation and decision on whether to invoke an EBERO event for the five critical registry functions.” Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Please register for the Novartis Secure Messaging Services
by postmaster.securemail＠novartis.com Sept. 29, 2017

Sept. 29, 2017

Dear icannsecurity-ssr2-rt(a)icann.org , The Novartis Associate james-1.gannon(a)novartis.com would like to send you an encrypted e-mail message (Re: [Icannsecurity-ssr2-rt] Welcome to ICANN's SSR2RT Subgroup #2 - ICANN SSR). In order to get the e-mail you need to register for the Novartis Secure Messaging services within 30 days of receipt.Please execute one of the three possibilites: * If you already have an own S/MIME certificate, please simply send a signed reply to this e-mail. * If you already have an own PGP key, please simply send a reply to this e-mail with your PGP public key attached. * Alternatively please register on the Secure Mail web portal by using the link and username below. During the registration you will need to change the password and define a set of security questions and answers. After that you will receive the secure e-mail in the form of SecurePDF. Login page : https://securemail.novartis.net/SecMail User ID : icannsecurity-ssr2-rt(a)icann.org Password : Please contact james-1.gannon(a)novartis.com to get your One-Time-Password (ideally use the phone for that). Sincerely,SecureMail Postmasterhttps://securemail.novartis.com

1 0

Welcome to ICANN's SSR2RT Subgroup #2 - ICANN SSR
by Boban Krsic Sept. 25, 2017

Sept. 25, 2017

Dear Norm, First of all, welcome to our subgroup and thanks for joining us. It is really great to have you on board! Let me first introduce myself: My name is Boban Krsic, CISO of DENIC in real-life, member and rapporteur of ICANN's SSR subgroup #2 - ICANN SSR. You will find at https://community.icann.org/display/SSR/Subgroup+%232+-+ICANN+SSR our workspace for further information. Feel free to contact me (or the list) for any questions you have. Hope to see you in LA! - Boban. -- Boban Kršić Chief Information Security Officer DENIC eG, Kaiserstraße 75-77, 60329 Frankfurt am Main, GERMANY E-Mail: krsic(a)denic.de, Fon: +49 69 272 35-120, Fax: -248 Mobil: +49 172 67 61 671 https://www.denic.de X.509 Key-ID: 00A54FCB79884413A4 Fingerprint: 9D37 F593 AF9A D766 FAB4 8B88 D49A 2716 PGP Key-ID: 0x43C89BA9 Fingerprint: B974 E725 FEF7 CB3A E452 BEE0 5B80 73E9 43C8 9BA9 Angaben nach § 25a Absatz 1 GenG: DENIC eG (Sitz: Frankfurt am Main) Vorstand: Helga Krüger, Martin Küchenthal, Andreas Musielak, Dr. Jörg Schweiger Vorsitzender des Aufsichtsrats: Thomas Keller Eingetragen unter Nr. 770 im Genossenschaftsregister, Amtsgericht Frankfurt am Main

6 5

Please register for the Novartis Secure Messaging Services
by Novartis Secure Mail Postmaster Sept. 25, 2017

Sept. 25, 2017

Dear icannsecurity-ssr2-rt(a)icann.org , The Novartis Associate james-1.gannon(a)novartis.com would like to send you an encrypted e-mail message (Re: [Icannsecurity-ssr2-rt] Welcome to ICANN's SSR2RT Subgroup #2 - ICANN SSR). In order to get the e-mail you need to register for the Novartis Secure Messaging services within 30 days of receipt.Please execute one of the three possibilites: * If you already have an own S/MIME certificate, please simply send a signed reply to this e-mail. * If you already have an own PGP key, please simply send a reply to this e-mail with your PGP public key attached. * Alternatively please register on the Secure Mail web portal by using the link and username below. During the registration you will need to change the password and define a set of security questions and answers. After that you will receive the secure e-mail in the form of SecurePDF. Login page : https://securemail.novartis.net/SecMail User ID : icannsecurity-ssr2-rt(a)icann.org Password : Please contact james-1.gannon(a)novartis.com to get your One-Time-Password (ideally use the phone for that). Sincerely,SecureMail Postmasterhttps://securemail.novartis.com

2 1

Re: [Icannsecurity-ssr2-rt] Action Required - Please respond - ICANN SSR Subgroup - 25 September 2017 @ 1600 UTC
by Boban Krsic Sept. 25, 2017

Sept. 25, 2017

Hi Yvette, Hope all is well? First day after my vacation and a little bit of work on my site ;-) I spoke with Zarko and we would like to discuss the following items in today’s conference call: * Final feedback on both documents * Work Plan “SSR2_sub_topic_ICANN.SSR” * Audit Plan * E-mail (reminder) regarding Key Action Items 1-7 and their responsibility in preparation for the workshop: * minimum of two group member per task (redundancy is always good ;-)) * one responsible member per task (defined by the label) * Final version of the NDA? In preparation for the workshop at ICANN: * Is there anything we need to do from the team side? * Sign the NDA ;-) * Read and understand the security, stability and resiliency framework * Read and understand the risk management framework * Prepare your questionnaire regarding the Could you please prepare them for the Adobe Connect Room? Thanks a lot! - Boban Am 23.09.17 um 14:33 schrieb Boban Krsic: > Hi Yvette, > > Am 22.09.17 um 22:39 schrieb MSSI Secretariat: >> Hi Boban - >> >> Hope all is well with you - just making sure you received my email below - please advise and thank you. > > Yes, thanks a lot! Let me first get in touch with Zarko this weekend and > I will come back to you on Monday regarding the Adobe Room. > > - Boban. > > >> >> Kind Regards, >> Yvette Guigneaux >> (MSSI) Multistakeholder Strategy & Strategic Initiatives >> Projects & Operations Assistant. >> >> ICANN - Internet Corporation for Assigned Names and Numbers >> Email: yvette.guigneaux(a)icann.org >> Cell: +1-310-460-8432 >> Skype: yvette.guigneaux.icann >> www.icann.org<http://www.icann.org/> >> >> [cid:image001.png@01D333A8.47F35CD0] >> >> >> >> >> >> >> >> >> >> From: MSSI Secretariat >> Sent: Thursday, September 21, 2017 11:53 AM >> To: 'krsic(a)denic.de' <krsic(a)denic.de> >> Subject: Action Required - Please respond - ICANN SSR Subgroup - 25 September 2017 @ 1600 UTC >> >> Hi Boban - >> >> Welcome back, hope you had a nice holiday. Wanted to touch base with you for the call on Monday, 25 September 2017 - wanted to see if there was anything you would like uploaded to the Adobe Room for the call? >> >> Please advise and thank you. >> >> Kind Regards, >> Yvette Guigneaux >> (MSSI) Multistakeholder Strategy & Strategic Initiatives >> Projects & Operations Assistant. >> >> ICANN - Internet Corporation for Assigned Names and Numbers >> Email: yvette.guigneaux(a)icann.org<mailto:yvette.guigneaux@icann.org> >> Cell: +1-310-460-8432 >> Skype: yvette.guigneaux.icann >> www.icann.org<http://www.icann.org/> >> >> [cid:image001.png@01D333A8.47F35CD0] >> >> >> >> >> >> >> >> >> >> > > -- Boban Kršić Chief Information Security Officer DENIC eG, Kaiserstraße 75-77, 60329 Frankfurt am Main, GERMANY E-Mail: krsic(a)denic.de, Fon: +49 69 272 35-120, Fax: -248 Mobil: +49 172 67 61 671 https://www.denic.de X.509 Key-ID: 00A54FCB79884413A4 Fingerprint: 9D37 F593 AF9A D766 FAB4 8B88 D49A 2716 PGP Key-ID: 0x43C89BA9 Fingerprint: B974 E725 FEF7 CB3A E452 BEE0 5B80 73E9 43C8 9BA9 Angaben nach § 25a Absatz 1 GenG: DENIC eG (Sitz: Frankfurt am Main) Vorstand: Helga Krüger, Martin Küchenthal, Andreas Musielak, Dr. Jörg Schweiger Vorsitzender des Aufsichtsrats: Thomas Keller Eingetragen unter Nr. 770 im Genossenschaftsregister, Amtsgericht Frankfurt am Main

2 1

Subtopic ICANN SSR: Backlog in Trello
by Boban Krsic Sept. 25, 2017

Sept. 25, 2017

Dear all, Based on the work plan [1] I've started to create a backlog in Trello [2] and add all missing team member. Please feel free to add further backlog items and please review the existing items. It would be great, if each team member add it's name to a preferred topic. Our goal should be: * minimum of two group member per task (redundancy is always good ;-)) * one responsible member per task (defined by the label) Thanks a lot! - Boban. [1] https://docs.google.com/document/d/145i1Q-ZXgsvuwpDIUi_jJt_WJlaCRoxBoh2vKtN… [2] https://trello.com/b/5Eu1ppuv/ssr2-subtopic-2-icann-ssr -- Boban Kršić Chief Information Security Officer DENIC eG, Kaiserstraße 75-77, 60329 Frankfurt am Main, GERMANY E-Mail: krsic(a)denic.de, Fon: +49 69 272 35-120, Fax: -248 Mobil: +49 172 67 61 671 https://www.denic.de X.509 Key-ID: 00A54FCB79884413A4 Fingerprint: 9D37 F593 AF9A D766 FAB4 8B88 D49A 2716 PGP Key-ID: 0x43C89BA9 Fingerprint: B974 E725 FEF7 CB3A E452 BEE0 5B80 73E9 43C8 9BA9 Angaben nach § 25a Absatz 1 GenG: DENIC eG (Sitz: Frankfurt am Main) Vorstand: Helga Krüger, Martin Küchenthal, Andreas Musielak, Dr. Jörg Schweiger Vorsitzender des Aufsichtsrats: Thomas Keller Eingetragen unter Nr. 770 im Genossenschaftsregister, Amtsgericht Frankfurt am Main

1 1

Action Required - Doodle Poll Results - ICANN SSR
by MSSI Secretariat Sept. 1, 2017

Sept. 1, 2017

Hi ICANN SSR - Below are the doodle poll results for the ICANN SSR conference call for 25 September to discuss strategies for the meeting in Los Angeles. Looks as if 16:00 and 19:00 UTC time slots are tied - any preferences? Please advise. [cid:image002.jpg@01D32324.3E3BFD30] Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/> [cid:image003.png@01D32321.8CC6AD40]

1 0