Recent discussions in the Security Incident Reporting (SIR) Work Party have focused on the details, authorities, and capabilities of an RSS Governance Structure (GS). We would like to bring the group back out of these details as they should not impact the work being addressed. We are making recommendations for SIR based on what we think should be done for the benefit of the RSS and the DNS community. The definition of "RSS GS" from RSSAC058 is as follows: The RSS Governance Structure, being the structure that provides organizational governance of the RSS, as adopted and amended from time to time We think that recommendations for SIR should not be different based on which body will perform the governance function. While we understand that different governance bodies may have different authorities and capabilities, our recommendations should focus on the foundations of incident reporting and leave the implementation details to the GS itself. The work party is only making recommendations and will have no authority to require their implementation. Our recommendation for the work party document is to adopt the definition of "RSS GS" from RSSAC058, remove references to RootOps, and explicitly state that we are not writing this document to focus on a specific governance body or implementation of a GS. There may be other places in the document that should be aligned as well. We look forward to a productive discussion tomorrow. RSSAC Caucus Security Incident Reporting Admin Team