October 2019 - Ssr2-review - lists.icann.org

Dinner tonight?
by Kerry-Ann Barrett Oct. 31, 2019

Oct. 31, 2019

Hey everyone Flight coming in a little delayed but wanted to know if any one had dinner plans tonight that I could crash and join. Please let me know :) Looking forward to the weekend . Cheers Kerry -Ann

1 0

Call summary: SSR2 30 October
by Jennifer Bryce Oct. 30, 2019

Oct. 30, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #89, 30 October 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/YoIzBw. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

A table to map recommendations
by Heather Flanagan Oct. 30, 2019

Oct. 30, 2019

Hello all, A question came up regarding where a specific recommendation landed in the draft report. I’ve kept a table mapping what went where; a copy is below, and a copy is also now online here (in case the formatting doesn’t work for your mail client): https://docs.google.com/spreadsheets/d/1V-S3dZFWtRTGeXOpreLj2ovkCEwmTEUGthi… <https://docs.google.com/spreadsheets/d/1V-S3dZFWtRTGeXOpreLj2ovkCEwmTEUGthi…> Old recommendation number Description Workstream New recommendation number Implement all SSR1 Recommendations SSR1 1 Recommendation 2 ISMS, Certification SSR1 3 Recommendation 3 Metrics, Vulnerability Disclosure SSR1 - still a work in progress 5 Recommendation 4 Budget Transparency SSR1 6 Recommendation 5 SSAC, RSSAC roles SSR1 2 Recommendation 6 SSR Strategy and Framework SSR1 4 Recommendation 7 Budgeting and gTLDs SSR1 7 Recommendation 8 Risk Management SSR1 8 Recommendation 10 Security Position, C-Suite WS2 9 Recommendation 11 Security Risk Management WS2 10 Recommendation 13 DNS Test Bed WS3 16 Recommendation 14 IANA Portal WS3 17 Recommendation 15 Root Server Ops WS3 19 Recommendation 19 Research and Briefings WS4 24 Recommendation 20 Abusive Naming WS3 15 Recommendation 24 Root Zone WS3 20 Recommendation 26 Key Rollover WS3 18 Recommendation 27 DR Plan WS2 11 Recommendation 28 Name Collision WS4 22 Recommendation 35 Crypto WS4 21 Recommendation 36 Privacy WS4 23 Abuse and Compliance: Compliance WS3 12 Abuse and Compliance: Abuse Definitions & Reporting WS3 13 Abuse and Compliance: Policies and Agreements with Contracted Parties WS3 14

1 0

Re: [Ssr2-review] Link to draft SSR2 report
by Barrett, Kerry-Ann Oct. 30, 2019

Oct. 30, 2019

Agreed!!!!! :) you are patient lol Sincerely Kerry-Ann Barrett Cybersecurity Program Officer Secretariat of the Inter-American Committee against Terrorism (CICTE) Secretariat for Multidimensional Security (SMS) Organization of American States 1889 F Street NW Washington D.C. 20006 (202) 370 4675 - (202) 458 3857 www.oas.org/cyber @KerryOAS| @OEA_Cyber Register to our distribution list here! -----Original Message----- From: Ssr2-review [mailto:ssr2-review-bounces@icann.org] On Behalf Of Weissinger, Laurin Sent: Wednesday, October 30, 2019 10:31 AM To: Heather Flanagan <hlf(a)sphericalcowconsulting.com> Cc: SSR2 Review <ssr2-review(a)icann.org> Subject: [EXT] Re: [Ssr2-review] Link to draft SSR2 report Thanks for all your effort, Heather! I am sure this document will help the team review the work. > On Oct 30, 2019, at 10:22, Heather Flanagan <hlf(a)sphericalcowconsulting.com> wrote: > > Hello all, > > I know Russ sent this out earlier this week, but to perhaps make it a > bit easier to find, here is the link to a draft copy of the SSR2 > report, which incorporates all the recommendations and some of the > findings, with minimal markup. I hope you find it useful for reviewing > all the recommendations from start to finish. You all have done a > massive amount of work! Thank you > > -Heather > > https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM8 > 1JOCtbx0A/edit _______________________________________________ > Ssr2-review mailing list > Ssr2-review(a)icann.org > https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.i > cann.org%2Fmailman%2Flistinfo%2Fssr2-review&data=02%7C01%7Claurin. > weissinger%40yale.edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb213 > 94df8b4114e3e87abeb5c%7C0%7C0%7C637080421873452680&sdata=pryKa%2Bh > PtOdcKp3p1fgKrDXGs5qwkIp%2BWKokfx3FS2I%3D&reserved=0 > > _______________________________________________ > By submitting your personal data, you consent to the processing of > your personal data for purposes of subscribing to this mailing list > accordance with the ICANN Privacy Policy > (https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww > .icann.org%2Fprivacy%2Fpolicy&data=02%7C01%7Claurin.weissinger%40y > ale.edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb21394df8b4114e3e8 > 7abeb5c%7C0%7C0%7C637080421873462675&sdata=JVBTaVRVopKqN6e5WZS6u3B > wTPjxEOjdsxglyaCfTLI%3D&reserved=0) and the website Terms of > Service > (https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww > .icann.org%2Fprivacy%2Ftos&data=02%7C01%7Claurin.weissinger%40yale > .edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb21394df8b4114e3e87ab > eb5c%7C0%7C0%7C637080421873462675&sdata=lH5u6gUJ51ZGfCUco9SoSgnJIn > n7O2dt%2FTDRRcJooF0%3D&reserved=0). You can visit the Mailman link > above to change your membership status or configuration, including > unsubscribing, setting digest-style deliv ery or d isabling delivery altogether (e.g., for a vacation), and so on. _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

2 1

Link to draft SSR2 report
by Heather Flanagan Oct. 30, 2019

Oct. 30, 2019

Hello all, I know Russ sent this out earlier this week, but to perhaps make it a bit easier to find, here is the link to a draft copy of the SSR2 report, which incorporates all the recommendations and some of the findings, with minimal markup. I hope you find it useful for reviewing all the recommendations from start to finish. You all have done a massive amount of work! Thank you -Heather https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt… <https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt…>

2 1

SSR2 Montreal agenda
by Jennifer Bryce Oct. 29, 2019

Oct. 29, 2019

Dear SSR2 RT members, Attached, please find the agenda for SSR2 meetings in Montreal. Additionally, please find below other ICANN66 sessions that may be of interest to you. Please let us know if you have any questions about the agenda or any of the scheduled meetings. Monday November 4 Enhancing the Effectiveness of Review Recommendations and Their Implementation 15:15 - 16:45 ET, 517D (Main Room) Reviews are an important element of ICANN’s multistakeholder model and continuous improvement. Improvements resulting from these reviews speak to ICANN’s accountability and transparency, and its ability to evolve as an institution that continuously improves, promoting the global public interest, with sensitivity to the changing environment as it relates to ICANN’s mission. Developing recommendations that propose improvements and implementing such recommendations effectively is required for the reviews to serve their intended purpose. With the wide range and scope of community-related review recommendations, there have been discussions within ICANN (community, Board and the ICANN organization) that have opened up the possibility for collaboratively engaging to make these recommendations more effective. https://66.schedule.icann.org/meetings/1116749 Tuesday November 5 Emerging Identifier Technology 13:30 - 15:00 ET, 511A As now regularly organized at ICANN meetings, this session will provide participants with the opportunity to learn more about emerging identifiers technologies. We will discuss in Montreal with experts working on GNU Name System (GNS - https://docs.gnunet.org/handbook/gnunet.html#The-GNU-Name-System) and Handshake system (https://handshake.org/) Join the OCTO team and other experts to hear about how these systems work and discuss whether they are relevant to the identifier system ICANN currently helps coordinate. https://66.schedule.icann.org/meetings/1116895 Wednesday November 6 DNS Abuse 10:30 - 12:00 ET, 517D (Main Room) This plenary session is coordinated by members of the Governmental Advisory Committee (GAC), the Generic Names Supporting Organization (GNSO), the Country Code Names Supporting Organization (ccNSO), and the Security and Stability Advisory Committee (SSAC). Following from the informational webinar that was conducted on 15 October, this plenary session will allow members of the community to continue to discuss practices to mitigate abuse and address related policy gaps. https://66.schedule.icann.org/meetings/1116759 Wednesday November 6 DAAR Improvements 13:30 - 14:30, 514A The session will include discussions on ongoing changes to the Domain Abuse Activity Reporting (DAAR) system and its corresponding monthly reports since ICANN65. It will also put forward ideas on a couple of planned future improvements to the system and aims to have constructive discussions with the community about them. https://66.schedule.icann.org/meetings/1116956 Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Re: [Ssr2-review] [EXT] Final Set of Recommendations
by Barrett, Kerry-Ann Oct. 29, 2019

Oct. 29, 2019

Dear Russ Just one clarification on below. I have a calendar invite for the engagement session on November 3, Sunday @ 5 pm? Was the meeting shifted? Just needed confirmation so I can confirm other meetings around it. Sincerely Kerry-Ann Barrett Cybersecurity Program Officer Secretariat of the Inter-American Committee against Terrorism (CICTE) Secretariat for Multidimensional Security (SMS) Organization of American States 1889 F Street NW Washington D.C. 20006 (202) 370 4675 - (202) 458 3857 www.oas.org/cyber @KerryOAS| @OEA_Cyber Register to our distribution list here! -----Original Message----- From: Ssr2-review [mailto:ssr2-review-bounces@icann.org] On Behalf Of Russ Housley Sent: Monday, October 28, 2019 4:24 PM To: ICANN SSR2 <ssr2-review(a)icann.org> Subject: [EXT] [Ssr2-review] Final Set of Recommendations Importance: High Team: We are very close to the final set of recommendations. We have been working on the "Red Letter Document", which you can find here: https://docs.google.com/document/d/10KOW2F6oqR3OdV7hfuWmnYo6gtE0d0wOZHOQzXm… On Wednesday, I hope that we have agreement on all of the recommendations. I know that some people will already be traveling. If you have any comments, please put them on the email list today or tomorrow so that they can be addressed on the call on Wednesday. In Montreal, we will be working from those recommendations. They will get reorganized and renumbered. I know this makes it harder to track changes, but it is time to organize the report for the community. Heather has just started that work. You can see some progress here: https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt… Once we wordsmith the recommendations in Montreal, we will put together a set of slide that includes all of the recommendations for the engagement session on Monday, November 4th at 3:15 (Montreal time). Talk to you on Wednesday, and see you on Friday, Russ _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

4 4

SSR2 agenda 30 October 2019
by Jennifer Bryce Oct. 29, 2019

Oct. 29, 2019

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 30 October at 14:00 UTC. 1. Welcome, roll call, SOI updates 2. Confirm agreement with the existing set of recommendations (see Google doc [docs.google.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_docume…>) 3. AOB * Team members to review SSR2 Montreal agenda for meeting details (will be circulated to list) 4. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Final Set of Recommendations
by Russ Housley Oct. 28, 2019

Oct. 28, 2019

Team: We are very close to the final set of recommendations. We have been working on the "Red Letter Document", which you can find here: https://docs.google.com/document/d/10KOW2F6oqR3OdV7hfuWmnYo6gtE0d0wOZHOQzXm… On Wednesday, I hope that we have agreement on all of the recommendations. I know that some people will already be traveling. If you have any comments, please put them on the email list today or tomorrow so that they can be addressed on the call on Wednesday. In Montreal, we will be working from those recommendations. They will get reorganized and renumbered. I know this makes it harder to track changes, but it is time to organize the report for the community. Heather has just started that work. You can see some progress here: https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt… Once we wordsmith the recommendations in Montreal, we will put together a set of slide that includes all of the recommendations for the engagement session on Monday, November 4th at 3:15 (Montreal time). Talk to you on Wednesday, and see you on Friday, Russ

1 0

SSR2 Meeting with Board Caucus Group
by MSSI Secretariat Oct. 28, 2019

Oct. 28, 2019

SSR2 Meeting with Board Caucus Group<https://community.icann.org/x/DIszBw> Zoom Link: https://icann.zoom.us/my/yul66.518 Date: Wednesday, 6 November 2019 Time - 15:15 - 16:45 local Montreal time - additional time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Meeting+with…> Room: Meeting Room - 518 ICANN66 | Montréal schedule link: HERE<https://66.schedule.icann.org/meetings/1126579>

1 0