October 2017 - Ssr2-review - lists.icann.org

Work Plan
by Alice Jansen Oct. 27, 2017

Oct. 27, 2017

Dear Review Team Members, Attached to this email, you will find a copy of the work plan the Co-Chairs are using for this morning’s discussion. Note: it is also available as a google spreadsheet – see https://docs.google.com/spreadsheets/d/1aeIbplMyz34zl_ezrMe7ED7Xe8ajIwqiaa5… Thanks Best Alice

1 0

Draft Agenda
by Osterweil, Eric Oct. 26, 2017

Oct. 26, 2017

Hey Team, Here’s a first cut at the draft agenda for this coming week. Please provide any input you like, bash away if it seems appropriate! :) We’ll assemble deltas from your comments on the list. Looking forward to seeing you all! Denise and Eric 1st Draft for Team input ICANN 60 – Abu Dhabi Day 1 Friday 27 October 09:00 – 17:30 | SSR2 Review Team Face-to-Face Meeting| Capital Suite 01 1. Welcome, SOI updates, opening remarks 2. Agenda and objectives for Abu Dhabi – review/discuss 3. Work plan and work methodologies – review/discuss * Work plan * Team survey 4. Subteams’ substantive progress and next steps – review/discuss * Subgroup #1 - SSR1 Review * Information gathering, research, substantive work achieved to date * Summary of issues that have emerged * Challenges and obstacles * Status of Gap Analysis * Next steps, workplan updates * Team discussion * Subgroup #2 - ICANN SSR * Information gathering, research, substantive work achieved to date * Summary of issues that have emerged * Challenges and obstacles * Initial findings and evolving recommendations * Overlap with other subteams? Gaps? * Next steps, workplan updates * Team discussion * Subgroup #3 - DNS SSR * Information gathering, research, substantive work achieved to date * Summary of issues that have emerged * Challenges and obstacles * Initial findings and evolving recommendations * Overlap with other subteams? Gaps? * Next steps, workplan updates * Team discussion * Subgroup #4 - Future Challenges * Information gathering, research, substantive work achieved to date * Summary of issues that have emerged * Challenges and obstacles * Initial findings and evolving recommendations * Gaps * Next steps, workplan updates * Team discussion * Subgroup #5 - IANA Transition * Information gathering, research, substantive work achieved to date * Summary of issues that have emerged * Challenges and obstacles * Initial findings and evolving recommendations * Gaps * Next steps, workplan updates * Team discussion 5. Outreach and Meetings at ICANN – review/discuss/finalize * Schedule and objectives * Slides & talking points 6. Next Steps and Next Team Meeting Adjournment Day 2 Friday 3 November 09:00 – 17:30 | SSR2 Review Team Face-to-Face Meeting| Capital Suite 01 1. Welcome, SOI updates, opening remarks 2. Agenda and objectives for 2nd meeting in Abu Dhabi – review/discuss 3. Feedback from the week and outreach sessions – review/discuss 4. Subteam work – review additional subteam work, proposals, work plan updates 5. Planning the Work Ahead * Work plan – review where we are in our workplan/schedule, and what we've committed to producing in the next month and next quarter; update workplan and schedule if needed * What do we need to start drafting a first draft of our report in a few months? * Identify any roadblocks to progress * Do we have all the information we need to reach our objectives? * Are we properly structured for the next phase of our work? * Do we have all the resources and support to reach our objectives? * Work for Gap Analysis contractor * Work for Researcher/Technical Writer * Other …. * Allocate tasks and responsibilities – Turning the inputs into outputs * Formulate requests for information and resources, as needed 6. Next Steps * Commitments on deliverables – what, who and by when. * Review agreements and action items Adjournment

3 2

Re: [Ssr2-review] [EXT] Re: Draft slides for outreach meetings
by Barrett, Kerry-Ann Oct. 26, 2017

Oct. 26, 2017

One minor addition to Alain's input Sincerely, Kerry-Ann Barrett Cyber Security Policy Specialist Inter-American Committee against Terrorism Secretariat for Multidimensional Security Organization of American States 1889 F Street N.W., Washington, D.C. 20006 T. 202-370-4675 F. 202-458-3857 kabarrett(a)oas.org<mailto:kabarrett@oas.org> www.oas.org/cyber<http://www.oas.org/cyber> Register to our distribution list here!<http://oas.us11.list-manage.com/subscribe?u=353ff0663258ae5a775d460db&id=10…> From: ssr2-review-bounces(a)icann.org [mailto:ssr2-review-bounces@icann.org] On Behalf Of ALAIN AINA Sent: Thursday, October 26, 2017 7:55 AM To: SSR2 Review Team Email List <ssr2-review(a)icann.org> Subject: [EXT] Re: [Ssr2-review] Draft slides for outreach meetings On 26 Oct 2017, at 07:50, Denise Michel <denisemichel(a)fb.com<mailto:denisemichel@fb.com>> wrote: Hi, All. Attached for comments/edits is a first draft of slides that can be used for our outreach meetings in Abu Dhabi. As the sessions are for community questions, input and discussions, the slides are brief and high level. Good but lack some important details to engage the parties after 9 months of the review and recent developments(board, SSAC, AC/SO chairs communications

1 0

Re: [Ssr2-review] No call this week
by Barrett, Kerry-Ann Oct. 24, 2017

Oct. 24, 2017

Thanks Denise Will look out for the email. Sincerely, Kerry-Ann Barrett Cyber Security Policy Specialist Inter-American Committee against Terrorism Secretariat for Multidimensional Security Organization of American States 1889 F Street N.W., Washington, D.C. 20006 T. 202-370-4675 F. 202-458-3857 kabarrett(a)oas.org<mailto:kabarrett@oas.org> www.oas.org/cyber<http://www.oas.org/cyber> Register to our distribution list here!<http://oas.us11.list-manage.com/subscribe?u=353ff0663258ae5a775d460db&id=10…> From: ssr2-review-bounces(a)icann.org [mailto:ssr2-review-bounces@icann.org] On Behalf Of Denise Michel Sent: Monday, October 23, 2017 6:45 PM To: SSR2 <ssr2-review(a)icann.org> Subject: [EXT] [Ssr2-review] No call this week Hi, All. We have canceled tomorrow’s call in anticipation of our week full of meetings that will be starting soon. We will need your engagement via email this week though …. Shortly, Eric and I will be sharing a draft agenda for the Team’s two days of meetings, for your input. A set of draft slides for the Team’s outreach meetings at ICANN 60 also will be posted for any suggested edits you may have. Safe travels. Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com>

1 0

AC Room Connectivity - SSR2 Review Team - Meeting #33 | 14:00 UTC | Tuesday, 24 October 2017
by MSSI Secretariat Oct. 23, 2017

Oct. 23, 2017

Hello SSR2 Review Team - Good day. Just touching base regarding connectivity for our next SSR2 Review Team - Meeting #33 | 14:00 UTC | Tuesday, 24 October 2017. In light of the audio/connection issues experienced on SSR2 Plenary calls recently, below are some suggested solutions... * Connect to the Adobe Room early - (https://participate.icann.org/ssrreview) 20-30 minutes before the scheduled call, the Adobe Connect room will be open and I will be available to assist you - in addition we can resolve any microphone/static/connection issues ahead of time - including connecting with international operators if need be. The goal is to have all connection concerns resolved by the top of the hour for the benefit of the team. * Feel free to Skype me either before, during or after the call - my skype address is yvette.guigneaux.icann - this way I can respond to you almost immediately for whatever you may need. * Allow the AC Room to dial out to you when you sign in - this audio method is connected to the sound bridge in the AC Room and therefore tends to remain more consistent throughout the call. Please see slide attached for visual tutorial. * Please (if possible) avoid using Adobe Room speakers - the audio is not reliable, tends to create an echo and cuts out without warning - thus your comments and questions are incomplete or may be not heard for the record. * Be located (if possible) in an area that has proper broadband connection and is quiet - thus creating a strong signal connection, making it possible to see and hear in the Adobe Connect Room. * Please make sure you have the newest Flash Player and the latest Adobe Connect Add-Ins installed - please do at least 24 hours prior to the call to insure all has time to sync properly. Go to http://admin.adobeconnect.com/common/help/en/support/meeting_test.htm ? Install the newest Flash Player, install Adobe Connect Add-in and perform the test. You should get something like this: [cid:image003.jpg@01D34C16.8709BC30] More screenshots below for Add-Ins... * Upon entering a meeting room, you will be prompted to install the Add-in with a Flash dialog box. [cid:image004.png@01D34C15.8F935CE0] * Hit Yes to install, and your meeting should launch automatically once the installation is complete. * You may see a bar populate near the top of your browser, asking you to Allow or Deny participate.icann.org to use Flash. If so, hit Allow. * To verify that you are now on the correct, updated version, go to the Help menu at the top right of a meeting room, and select About Adobe Connect. [cid:image005.png@01D34C15.8F935CE0] * Your Adobe Connect Add-in Version should be either MAC 11.9.980.387 or WIN 11.9.980.387, depending on if you are on a Mac or Windows machine * [cid:image006.png@01D34C15.8F935CE0] As your SSR2 Review Team Secretariat, I am determined to create an atmosphere where you can clearly participate in the Adobe Connect Room. Thank you everyone and I look forward to seeing you all on our upcoming call. Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/> [cid:image001.png@01D34326.60C55640]

1 0

No call this week
by Denise Michel Oct. 23, 2017

Oct. 23, 2017

Hi, All. We have canceled tomorrow’s call in anticipation of our week full of meetings that will be starting soon. We will need your engagement via email this week though …. Shortly, Eric and I will be sharing a draft agenda for the Team’s two days of meetings, for your input. A set of draft slides for the Team’s outreach meetings at ICANN 60 also will be posted for any suggested edits you may have. Safe travels. Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com>

1 0

Security Framework now available
by Jennifer Bryce Oct. 23, 2017

Oct. 23, 2017

Hi all, FYI, the Security Framework for Registry Operator's Response to Security Threats is now available: https://www.icann.org/news/announcement-2-2017-10-20-en We are in the process of scheduling a briefing for the SSR2 in Abu Dhabi. A public session to present the Framework is scheduled for Sunday 29th October at 17:00 - 18:30. (View the session on the schedule: http://sched.co/CbGb) Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Re: [Ssr2-review] [Ext] [Ianatransition-ssr2-rt] Proposed times for meeting w/Kim Davies
by Jennifer Bryce Oct. 19, 2017

Oct. 19, 2017

Hi Geoff, Thanks for the clarification. Per our discussion, you will remain a member of the IANA Transition and DNS SSR subgroups only. Best, Jennifer -----Original Message----- From: Geoff Huston <gih902(a)gmail.com> Date: Wednesday, October 18, 2017 at 6:26 PM To: Jennifer Bryce <jennifer.bryce(a)icann.org> Cc: Alice Jansen <alice.jansen(a)icann.org> Subject: Re: [Ext] [Ianatransition-ssr2-rt] Proposed times for meeting w/Kim Davies ahhh - my mistake. I assume that the IANA transition is not asking me to sign an NDA, and under that assumption I am happy to remain a member of this (IANA Transition) sub group. my apologies for the confusion here. Geoff >> -----Original Message----- >> From: Geoff Huston <gih902(a)gmail.com> >> Date: Tuesday, October 17, 2017 at 6:26 PM >> To: Jennifer Bryce <jennifer.bryce(a)icann.org> >> Cc: "IANAtransition-SSR2-RT(a)icann.org" <IANAtransition-SSR2-RT(a)icann.org> >> Subject: [Ext] Re: [Ianatransition-ssr2-rt] Proposed times for meeting w/Kim Davies >> >> Hi Jennifer, >> >> I'm no longer a member of the IANA subteam, so I’m unsure why you are asking me this question. >> >> thanks, >> >> Geoff >> >> >> >>> On 18 Oct 2017, at 4:10 am, Jennifer Bryce <jennifer.bryce(a)icann.org> wrote: >>> >>> Hi IANA subteam, >>> >>> Below are some suggested time slots to meet with Kim Davies in Abu Dhabi. As a reminder, the meeting was requested by Cathy to “answer questions on PGP alternatives to progress the IANA transition subteam's work” (Item 141 on the tracker). >>> >>> Eric and Geoff, can you please advise if you will both attend the meeting in-person and if any of the below proposed 60-minute slots are suitable? >>> >>> (GST local time) >>> • 9am Tuesday >>> • 9am Wednesday >>> • 3pm Wednesday >>> >>> Thanks, >>> Jennifer >>> -- >>> Jennifer Bryce >>> Senior Reviews Coordinator >>> Internet Corporation for Assigned Names and Numbers (ICANN) >>> >>> Email: jennifer.bryce(a)icann.org >>> Skype: jennifer.bryce.icann >>> www.icann.org >>> _______________________________________________ >>> IANATransition-SSR2-RT mailing list >>> IANATransition-SSR2-RT(a)icann.org >>> https://mm.icann.org/mailman/listinfo/ianatransition-ssr2-rt >> >> >> > > > > <Mail Attachment.eml>

1 0

Subgroup ICANN SSR: Fact-Finding Meeting 9-10 Oct. in LA
by Boban Krsic Oct. 18, 2017

Oct. 18, 2017

Dear all, The ICANN SSR Subgroup had a very productive two-day, fact-finding meeting at ICANN headquarter. The subgroup met with a number of ICANN staff subject matter experts (SME) and discussed a range of issues relating to the completeness and effectiveness of ICANN’s security processes and the effectiveness of the ICANN security framework (including activities connected to the SSR2 ToR and implementation of SSR1 recommendations). Topics were covered to varying degrees of detail as warranted; some topics were covered sufficiently and some will require follow-on discussions. The subgroup will update its contribution to the SSR2 work plan and post more fulsome documentation of how the subgroup’s work has advanced and issues that we’re preparing to bring to the full SSR2 Team for consideration. Note that some topics/discussions will be cross-referenced for other SSR2 subgroups (e.g. Security Framework and emerging threats apply to the Future Challenges Subgroup). Meanwhile, here’s a high-level summary of the fact-finding meeting. The subgroup reviewed, submitted questions & information requests about, and discussed early observations about: * ICANN’s Security Framework and emerging threats * ICANN’s Risk Management Framework * ICANN’s Business Continuity strategies, objectives, plans and procedures * ICANN’s operational planning and controls, and prioritized activity recovery strategy * ICANN’s Incident Response Structure * ICANN’s root server operations * ICANN’s Domain Division activities that relate to SSR objectives, including: * New gTLD program SSR-related safeguards * Emergency Back-End Registry Operator (EBERO), and related processes, and testing * Registry Data Escrow (RyDE) program and Data Escrow Agents (DEA) * Centralized Zone Data Service (CZDS) compliance, failures, plans * Vetting of registrar and registry operators as relates to SSR, and measurement & impact of malicious conduct by contracted parties, data breaches, etc. * SLA Monitoring System (SLAM) * Abuse reports, including SADAG and DAAR (Statistical Analysis of DNS Abuse & Domain Abuse Activity Reporting) * SSR objectives in ICANN’S standard operating procedures (SOP). As rapporteur and member of the subgroup ICANN SSR I would like to thank all SSRT2 members, ICANN staff and SME's for investing their time, preparing and attend at the meeting in LA. Thank you very much - we have taken a significant step forward in our subgroup and our related topics. Best regrads, - Boban. -- Boban Kršić Chief Information Security Officer DENIC eG, Kaiserstraße 75-77, 60329 Frankfurt am Main, GERMANY E-Mail: krsic(a)denic.de, Fon: +49 69 272 35-120, Fax: -248 Mobil: +49 172 67 61 671 https://www.denic.de X.509 Key-ID: 00A54FCB79884413A4 Fingerprint: 9D37 F593 AF9A D766 FAB4 8B88 D49A 2716 PGP Key-ID: 0x43C89BA9 Fingerprint: B974 E725 FEF7 CB3A E452 BEE0 5B80 73E9 43C8 9BA9 Angaben nach § 25a Absatz 1 GenG: DENIC eG (Sitz: Frankfurt am Main) Vorstand: Helga Krüger, Martin Küchenthal, Andreas Musielak, Dr. Jörg Schweiger Vorsitzender des Aufsichtsrats: Thomas Keller Eingetragen unter Nr. 770 im Genossenschaftsregister, Amtsgericht Frankfurt am Main

2 2

FYI: Operating Standards webinar
by Jennifer Bryce Oct. 18, 2017

Oct. 18, 2017

Hi all, Operating Standards for ICANN’s specific reviews are now open for public comment<https://www.icann.org/public-comments/reviews-standards-2017-10-17-en>. A webinar on the Operating Standards will take place on Thursday 19 October at 21:00 UTC. During the webinar, the ICANN organization will provide an overview of the draft, explain the underlying principals, and highlight the existing review best practices and processes on which these draft Operating Standards are based. You can learn more about the webinar and how to join here: https://www.icann.org/news/announcement-2-2017-10-12-en -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0