- Ssr2-review - lists.icann.org

Re: [Ssr2-review] [Ext] Re: SSR2 RT / Board Caucus meeting in Marrakech
by Jennifer Bryce June 17, 2019

June 17, 2019

Hi Denise, Thank you for your email. We will schedule a conference call after Marrakech instead of the in-person meeting. Best, Jennifer From: Denise Michel <denisemichel(a)fb.com> Date: Friday, June 14, 2019 at 5:38 PM To: Jennifer Bryce <jennifer.bryce(a)icann.org>, "ssr2-review(a)icann.org" <ssr2-review(a)icann.org> Subject: [Ext] Re: [Ssr2-review] SSR2 RT / Board Caucus meeting in Marrakech Hi. Would you please schedule a conference call with the “Board Caucus” at another time in lieu of this Sat. meeting as not enough of us can make it. Thanks Denise Denise Michel Sent via mobile From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Thursday, June 13, 2019 at 10:11 AM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] SSR2 RT / Board Caucus meeting in Marrakech Dear SSR2 RT, We have been working to schedule a meeting with the SSR2 and the SSR2 Board Caucus Group in Marrakech, as requested by the Review Team in Kobe. The slot available for an in-person meeting is Saturday 22 June 17.30 - 18.30 local time (16:30 - 17:30 UTC). Remote attendance will be available for those who are not traveling. Unfortunately, no other slots are available for an in-person meeting, as this is a Policy Forum and scheduling is particularly challenging. Please let us know if you do not wish to proceed with this meeting at the available time. If we do not hear otherwise by 23:59 UTC tomorrow, Friday 14 June, we’ll proceed with scheduling. Many thanks, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Re: [Ssr2-review] SSR2 RT / Board Caucus meeting in Marrakech
by Denise Michel June 14, 2019

June 14, 2019

Hi. Would you please schedule a conference call with the “Board Caucus” at another time in lieu of this Sat. meeting as not enough of us can make it. Thanks Denise Denise Michel Sent via mobile From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Thursday, June 13, 2019 at 10:11 AM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] SSR2 RT / Board Caucus meeting in Marrakech Dear SSR2 RT, We have been working to schedule a meeting with the SSR2 and the SSR2 Board Caucus Group in Marrakech, as requested by the Review Team in Kobe. The slot available for an in-person meeting is Saturday 22 June 17.30 - 18.30 local time (16:30 - 17:30 UTC). Remote attendance will be available for those who are not traveling. Unfortunately, no other slots are available for an in-person meeting, as this is a Policy Forum and scheduling is particularly challenging. Please let us know if you do not wish to proceed with this meeting at the available time. If we do not hear otherwise by 23:59 UTC tomorrow, Friday 14 June, we’ll proceed with scheduling. Many thanks, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Call summary: SSR2 13 June
by Jennifer Bryce June 13, 2019

June 13, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #74, 13 June 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/MhNIBg. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2 RT / Board Caucus meeting in Marrakech
by Jennifer Bryce June 13, 2019

June 13, 2019

Dear SSR2 RT, We have been working to schedule a meeting with the SSR2 and the SSR2 Board Caucus Group in Marrakech, as requested by the Review Team in Kobe. The slot available for an in-person meeting is Saturday 22 June 17.30 - 18.30 local time (16:30 - 17:30 UTC). Remote attendance will be available for those who are not traveling. Unfortunately, no other slots are available for an in-person meeting, as this is a Policy Forum and scheduling is particularly challenging. Please let us know if you do not wish to proceed with this meeting at the available time. If we do not hear otherwise by 23:59 UTC tomorrow, Friday 14 June, we’ll proceed with scheduling. Many thanks, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

Marrakech attendance poll SSR2
by Jennifer Bryce June 13, 2019

June 13, 2019

Dear all, For info, attached are the results from the Doodle poll re: which team members will be in Marrakech for the f2f meeting, and on which days. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 2

Re: [Ssr2-review] Marrakech attendance poll SSR2
by Denise Michel June 13, 2019

June 13, 2019

I will be in Marrakech as well. Denise Michel denisemichel(a)fb.com<mailto:denisemichel@fb.com> From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Thursday, June 13, 2019 at 7:59 AM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] Marrakech attendance poll SSR2 Dear all, For info, attached are the results from the Doodle poll re: which team members will be in Marrakech for the f2f meeting, and on which days. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

4 3

Re: [Ssr2-review] Marrakech attendance poll SSR2
by Barrett, Kerry-Ann June 13, 2019

June 13, 2019

Dear Review Team I have advised the leadership team already, but unfortunately I have to travel with my boss to deliver a workshop in Singapore around the same dates and going from Marrakesh to Singapore was not proving feasible to make my presence at both meaningful. I’m available to assist with any drafting leading up to the F2F. I also wanted to put on the table if anyone think it is possible for us in the USA to meet up for a smaller F2F. [OAS.org]<http://www.oas.org/> Sincerely Kerry-Ann Barrett Cybersecurity Program Officer Secretariat of the Inter-American Committee against Terrorism (CICTE) Secretariat for Multidimensional Security (SMS) Organization of American States 1889 F Street NW Washington D.C. 20006 [http://www.oas.org/en/sms/signature_images/phone.png] (202) 370 4675 - [http://www.oas.org/en/sms/signature_images/fax.png] (202) 458 3857 www.oas.org/cyber<http://www.oas.org/cyber> @KerryOAS<https://twitter.com/KerryOAS>| @OEA_Cyber<https://twitter.com/OEA_Cyber> Register to our distribution list here!<http://oas.us11.list-manage.com/subscribe?u=353ff0663258ae5a775d460db&id=10…> From: Ssr2-review [mailto:ssr2-review-bounces@icann.org] On Behalf Of Jennifer Bryce Sent: Thursday, June 13, 2019 10:59 AM To: ssr2-review(a)icann.org Subject: [EXT] [Ssr2-review] Marrakech attendance poll SSR2 CAUTION: EXTERNAL SENDER Dear all, For info, attached are the results from the Doodle poll re: which team members will be in Marrakech for the f2f meeting, and on which days. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org> Skype: jennifer.bryce.icann www.icann.org<http://www.icann.org>

1 0

Apologies
by Eric Osterweil June 13, 2019

June 13, 2019

Hi all, Apologies, I will not be able to attend today’s call. Eric

1 0

SSR2 agenda 13 June 2019
by Jennifer Bryce June 13, 2019

June 13, 2019

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Thursday 13 June at 14:00 UTC. 1. Welcome, roll call, SOI updates 2. Technical writer status 3. Review each of the draft recommendations to determine consensus level (consolidated text Google doc here<https://docs.google.com/document/d/10KOW2F6oqR3OdV7hfuWmnYo6gtE0d0wOZHOQzXm…>) 4. AOB 5. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

Re: [Ssr2-review] Compliance call follow-up questions
by Jennifer Bryce June 7, 2019

June 7, 2019

Dear Norm, Laurin, KC, Kerry-Ann, Denise; Below are answers to follow-up questions directed to ICANN Compliance. Please let me know if you have any questions. Best, Jennifer Q: For many years, Compliance has been stating that they don’t have the tools, authority, contract language that they need to effectively address contractual compliance-related issues impacting DNS abuse, especially systemic abuse. What stopped Compliance from doing a gap analysis and creating a list of improvements, and compiling a list of specific things they need in contracts, etc.? A: During periods of contract negotiations between ICANN org and the contracted parties, Contractual Compliance has provided input to those negotiating on behalf of ICANN org (e.g., GDD, Legal). This input has focused on implementation and enforcement matters. In turn, ICANN org’s negotiating team takes into account Contractual Compliance’s input, along with that of other departments within ICANN org, and incorporates it into ICANN org’s overall strategy and approach for negotiation. In addition, Contractual Compliance provides continuous input to GDD, Legal, OCTO and others regarding enforcement of the agreements after they have been executed so as to inform discussions of potential future amendments or changes to those agreements. Contractual Compliance does not maintain or publish a separate set of demands, independent of ICANN org. Q: It is common for regulatory/compliance entities worldwide to specify the tools, authority, etc. they need to improve impact, and compliance representatives are often directly involved in negotiating and effecting these changes. Jamie indicated that Compliance is not involved in discussions/negotiations to change the RAA & Registry agreements as it “wouldn’t be appropriate.” What does he base this statement on? What, specifically are the barriers (Bylaw language? Contract language?) that prevents Compliance from having a seat at the negotiating table to get what they need? A: Since Contractual Compliance has the responsibility of enforcing ICANN org’s agreements with registries and registrars, it would be neither appropriate nor advantageous for us to participate directly in the negotiations. By negotiating provisions in an agreement, our ability to enforce them could be compromised by our participation in the negotiations, particularly with provisions that may have more than one interpretation. By not participating in the negotiations, we are able to assume a neutral approach in enforcing the agreements, not tainted or limited by the dynamics of the negotiation. Q: When will the Spec 11 Registry audit be done? Will it be publicly posted when done? A: The Registry DNS abuse Audit began in November 2018 and should conclude in June or July 2019. We have already completed many of the individual registry operator audits. The results of the individual audits will remain confidential. At the conclusion of the audit, Contractual Compliance will post a public report. Again, this report should be published in June or July on the Audit landing page at https://www.icann.org/resources/pages/audits-2012-02-25-en. Q: Is Compliance doing an audit of Registrars’ compliance with the requirement that they must investigate and respond to abuse? A: As previously announced, Contractual Compliance will conduct a Registrar DNS Abuse Audit after the conclusion of the Registry audit. Q: Jamie said Compliance is using DAAR in the Registry audit. Are they using it in Registrar audits? If not, why not? A: For the upcoming Registrar Audit, Contractual Compliance will rely on data from Reputational Block Lists (RBLs) that are publicly available. Q: Jamie indicated that, in the future, DAAR will provide the public with aggregated abuse stats at the Registrar level, but staff responsible for DAAR stated in Kobe that this would not be done. Please provide clarification. A: DAAR is not currently being used to publish registrar data due to challenges in accurately associating domain names with registrars. ICANN org is exploring possible solutions and hopes to be able to provide information on registrar DNS abuse in the near future. ICANN’s SSR team is leading the DAAR effort and they will be the appropriate team to discuss the technical capabilities of the DAAR tool. From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Thursday, May 30, 2019 at 11:58 AM To: Denise Michel <denisemichel(a)fb.com> Cc: "ssr2-review(a)icann.org" <ssr2-review(a)icann.org> Subject: Re: [Ssr2-review] [Ext] Compliance call follow-up questions Hi Denise, Thank you for sending the follow-up questions for compliance. We will begin working on these per our usual process and will keep the team apprised of progress. Best, Jennifer From: Denise Michel <denisemichel(a)fb.com> Date: Wednesday, May 29, 2019 at 8:23 PM To: Jennifer Bryce <jennifer.bryce(a)icann.org> Cc: Norm Ritchie <norm(a)webcatcher.ca>, "Weissinger, Laurin" <laurin.weissinger(a)yale.edu>, k claffy <kc(a)caida.org>, "Barrett, Kerry-Ann" <KABarrett(a)oas.org> Subject: [Ext] Compliance call follow-up questions Hi, Jennifer. Here are the questions from the Compliance Subgroup that should be expedited for answers. Please let the following members know when the answers will be provided, and please direct any follow-up questions to: Norm, Laurin, KC, Kerry-Ann, Denise Thanks for your help. Denise * For many years, Compliance has been stating that they don’t have the tools, authority, contract language that they need to effectively address contractual compliance-related issues impacting DNS abuse, especially systemic abuse. What stopped Compliance from doing a gap analysis and creating a list of improvements, and compiling a list of specific things they need in contracts, etc.? * It is common for regulatory/compliance entities worldwide to specify the tools, authority, etc. they need to improve impact, and compliance representatives are often directly involved in negotiating and effecting these changes. Jamie indicated that Compliance is not involved in discussions/negotiations to change the RAA & Registry agreements as it “wouldn’t be appropriate.” What does he base this statement on? What, specifically are the barriers (Bylaw language? Contract language?) that prevents Compliance from having a seat at the negotiating table to get what they need? * When will the Spec 11 Registry audit be done? Will it be publicly posted when done? * Is Compliance doing an audit of Registrars’ compliance with the requirement that they must investigate and respond to abuse? * Jamie said Compliance is using DAAR in the Registry audit. Are they using it in Registrar audits? If not, why not? * Jamie indicated that, in the future, DAAR will provide the public with aggregated abuse stats at the Registrar level, but staff responsible for DAAR stated in Kobe that this would not be done. Please provide clarification.

1 0