January 2019 - Ssr2-review - lists.icann.org

Re: [Ssr2-review] Draft agenda: SSR2 f2f meeting
by Jennifer Bryce Jan. 25, 2019

Jan. 25, 2019

Dear all, Please note the meeting adjourn time is scheduled for 17:00 PT (01:00 UTC) on each day. It was pointed out to me that the agenda said 18:00 in some places - the updated and correct agenda is attached. Best, Jennifer From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Wednesday, January 23, 2019 at 4:38 PM To: "ssr2-review(a)icann.org" <ssr2-review(a)icann.org> Subject: [Ssr2-review] Draft agenda: SSR2 f2f meeting Dear all, Please find attached the draft agenda for the SSR2 Review Team face-to-face meeting in Los Angeles, 25-27 January. Please let us know if you have any questions or edits. For those of you traveling to LA, we look forward to seeing you in person on Friday. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Draft agenda: SSR2 f2f meeting
by Jennifer Bryce Jan. 24, 2019

Jan. 24, 2019

Dear all, Please find attached the draft agenda for the SSR2 Review Team face-to-face meeting in Los Angeles, 25-27 January. Please let us know if you have any questions or edits. For those of you traveling to LA, we look forward to seeing you in person on Friday. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

GNSO SPS/SSR2 RT conflict
by Scott McCormick Jan. 24, 2019

Jan. 24, 2019

Hi All, Due GNSO SPS and SSR2 F2F conflicting this Friday. I will be over at the ICANN office with Council till 1400, then switching to join you all for the weekend. See you Friday afternoon. Cheers, -Scott *Scott McCormick* Security Compliance Manager mobile 443.691.2013 smccormick(a)hackerone.com <https://www.hackerone.com> *Check out the 2018 Hacker Powered Security Report <https://www.hackerone.com/sites/default/files/2018-07/The%20Hacker-Powered%…>* [image: linkedin3.png] <https://www.linkedin.com/company/hackerone> [image: twitter-xxl.png] <http://t.yesware.com/tt/324020b77f436d605944dd917f93cf8de45fe242/62c45ebe13…> [image: facebook-symbol_318-37686.jpg] <http://t.yesware.com/tt/324020b77f436d605944dd917f93cf8de45fe242/62c45ebe13…>

1 0

DNS SSR Work Stream Straw-Man
by Eric Osterweil Jan. 24, 2019

Jan. 24, 2019

Hi all, I meant to send this out right after the call that we discussed it on, but I think it slipped through the cracks. Comments/feedback welcome! Eric

1 0

ICANN SSR links
by Jennifer Bryce Jan. 19, 2019

Jan. 19, 2019

Dear SSR2 Review Team members, As discussed on the call yesterday, below are links to the ICANN SSR former subgroup’s work. This information is available on the wiki. Per the action item on the call yesterday for those involved in ICANN SSR former subteam to flag any areas where more follow-up or interviews are required, we are sharing this information in email to help facilitate this work. Subteam members as of October 2017: Boban (rapporteur), Denise, Kerry-Ann, Eric, Noorul, Norm, Žarko Mandate as of October 2017: The group will be responsible for reviewing the completeness and effectiveness of ICANNs internal security processes and the effectiveness of the ICANN security framework. Wiki page: https://community.icann.org/x/hSrwAw Documents (all on the wiki page above): * Preamble for report (Google doc, drafted by Boban December 2018): https://docs.google.com/document/d/1Gh1LwDPrKi28phPHDYKziXMRCaNLIGg9KXENpKL… * Draft report, ICANN SSR subgroup meeting in LA (drafted by RT members October 2017): https://docs.google.com/document/d/1QsvBp4GNW_TILEos29YQxTb4ZH7qcQFAh_4e0Xg… * Follow-up questions & answers from subgroup meeting in LA (Excel file available for download): https://community.icann.org/download/attachments/66071173/ICANN%20SSR%20Que… * Trello board: https://trello.com/b/5Eu1ppuv/ssr2-subtopic-2-icann-ssr * Subtopic activities (Google doc, drafted by RT members October 2017): https://docs.google.com/document/d/145i1Q-ZXgsvuwpDIUi_jJt_WJlaCRoxBoh2vKtN… Meeting summary The ICANN SSR Subgroup had a very productive two-day, fact-finding meeting at ICANN headquarters in Los Angeles. The subgroup met with a number of ICANN staff subject matter experts and discussed a range of issues relating to the completeness and effectiveness of ICANN’s security processes and the effectiveness of the ICANN security framework (including activities connected to the SSR2 Terms of Reference<https://community.icann.org/display/SSR/Terms+of+Reference> and implementation of SSR1 recommendations). Topics were covered to varying degrees of detail as warranted; some topics were covered sufficiently and some will require follow-on discussions. The subgroup reviewed, submitted questions & information requests about, and discussed early observations about: * ICANN’s Security Framework and emerging threats * ICANN’s Risk Management Framework * ICANN’s Business Continuity strategies, objectives, plans and procedures * ICANN’s operational planning and controls, and prioritized activity recovery strategy * ICANN’s Incident Response Structure * ICANN’s root server operations * ICANN’s Global Domains Division activities that relate to SSR objectives, including: * New gTLD program SSR-related safeguards * Emergency Back-End Registry Operator (EBERO), and related processes, and testing * Registry Data Escrow (RyDE) program and Data Escrow Agents (DEA) * Centralized Zone Data Service (CZDS) compliance, failures, plans * Vetting of registrar and registry operators as relates to SSR, and measurement & impact of malicious conduct by contracted parties, databreaches, etc. * SLA Monitoring System (SLAM) * Abuse reports, including SADAG and DAAR (Statistical Analysis of DNS Abuse & Domain Abuse Activity Reporting) * SSR objectives in ICANN’S standard operating procedures (SOP). Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

Call summary: SSR2 17 January
by Jennifer Bryce Jan. 18, 2019

Jan. 18, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #57, 17 January at 15:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki at: https://community.icann.org/x/CQH_BQ. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Resignation
by Mohamad Amin hasbini Jan. 17, 2019

Jan. 17, 2019

Hello everyone, It's been a tough period for me (phd) and i was not able to contribute correctly to the ICANN assessment, especially after the restart. Please consider this text as my resignation, i wish you all good luck. Regards, Amin

1 0

SSR1 recommendations draft text - next steps
by Jennifer Bryce Jan. 17, 2019

Jan. 17, 2019

Dear SSR2-RT members, Per the 6 December<https://community.icann.org/x/o4DnBQ> plenary meeting, review team members are requested to begin writing up the draft text for each SSR1 recommendation. Those who volunteered for the task of initially researching the recommendations are asked to draft this text for the team’s review. Please use this Google doc (p4 onwards) to insert draft text: https://docs.google.com/document/d/1WwzmsBDEtI0uvrxqSIs7zaBZRalZkC-TwO1VE_p…. Pen-holders are indicated in the doc, which is accessible to Review Team members only. For reference, here is the document that contains the initial findings as drafted by the RT: https://docs.google.com/document/d/1qUxV4L-gS5xHmC4QQPGRk81MgQuhQvsbnEU7xxe… Please let us know if you have any questions. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

4 9

SSR2 agenda - 17 January
by Jennifer Bryce Jan. 17, 2019

Jan. 17, 2019

Dear SSR2 RT members, Below is the agenda for the plenary meeting on Thursday 17 January at 16:00 UTC. 1. Welcome, roll call, SOI updates * Reminder: Please complete Doodle poll<https://doodle.com/poll/9zgpmymrb5ppp5ey> with your availability for a potential face-to-face meeting after Kobe - by end of this week 2. SSR1 recommendations text - draft final text is in the Google document<https://docs.google.com/document/d/1WwzmsBDEtI0uvrxqSIs7zaBZRalZkC-TwO1VE_p…>, consensus call on the text will take place in LA during the f2f meeting. 3. ICANN SSR workstream brainstorm – who do we need to interview, and what questions do we need to ask them? 4. DNS SSR workstream – next steps. 5. AOB 6. Confirm action items/ decisions reached Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 3

Looking forward to our meeting in LA
by Russ Housley Jan. 15, 2019

Jan. 15, 2019

We expect to have a first draft of the SSR1-related text finished for the call on Thursday. I as people to review it and make edits in the Google Doc before the meeting in LA. That way, we can spend almost no meeting time on that topic. With the evaluation of the SSR1 Recommendations essentially behind us, I want to spend out time in LA on these things: - Formal consensus call on the SSR1 Recommendation text - ICANN SSR - Who else do we need to talk to? - What other information do we need? - DNS SSR - How are we going to organize our work? - Who do we need to talk to? - What information do we need? Russ

1 0