- Ssr2-review - lists.icann.org

Call summary: SSR2 9 May
by Jennifer Bryce May 10, 2019

May 10, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #69, 9 May at 15:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/IgV1Bg. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Compliance responses
by Jennifer Bryce May 9, 2019

May 9, 2019

Dear SSR2 RT members, ICANN Compliance has provided the attached information regarding the questions asked in advance of the discussion scheduled for 14th May. These have been posted to the wiki here: https://community.icann.org/x/zgRpBQ. The call with ICANN Compliance remains scheduled for the 14th May as we understand that the review team members involved still wish to have the call, but please do let us know if anything changes based on the responses provided. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 3

Brussels F2F Agenda
by Jennifer Bryce May 9, 2019

May 9, 2019

Dear SSR2 Review Team members, Please find attached the agenda for the face-to-face meeting in Brussels, as Russ outlined today on the call. Please share any comments or questions you have on-list. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2 agenda 9 May
by Jennifer Bryce May 8, 2019

May 8, 2019

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Thursday 9 May at 14:00 UTC. 1. Welcome, roll call, SOI updates 2. Review items that are red, yellow on status table [docs.google.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_docume…>, determine roadblocks and potential workarounds 3. AOB 4. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Perform an assessment of ICANN's Information Security Management System.
by Matogoro Jabera May 2, 2019

May 2, 2019

Dear Alain, Dear Noorul, It is my hope that this email will find you doing fine. I am writing as a follow-up on any status regarding our topic - Perform an assessment of ICANN's Information Security Management System. Please let me know if you have something already. Otherwise, I would be happy to write something later today and share it back by next week for your quick review. Regards, -- MATOGORO Jabhera Assistant Lecturer College of Informatics and Virtual Education The University of Dodoma P.O Box 490, Dodoma. Website: www.udom.ac.tz *IEEE Membership ID: 93934185*

4 7

Call summary: SSR2 02 May
by Negar Farzinnia May 2, 2019

May 2, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #68, 02 May at 15:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/display/SSR/SSR2+Plenary+%2368+-+2+May+2019. The transcript usually becomes available 5 - 7 business days after the meeting. Kind regards, Negar

1 0

SSR2 agenda 2 May
by Jennifer Bryce May 2, 2019

May 2, 2019

Dear SSR2 RT members, Here is the agenda for the next SSR2 plenary call, scheduled for Thursday 2 May at 14:00 UTC. 1. Welcome, roll call, SOI updates 2. Technical Writer Update 3. Review items that are red, yellow on status table [docs.google.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_docume…>, determine roadblocks and potential workarounds 4. AOB 5. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

4 3

Re: [Ssr2-review] FYI - ICANN DNS Symposium
by Jennifer Bryce May 2, 2019

May 2, 2019

Dear all, Remote participation will be available throughout the DNS Symposium - you can find the Zoom information at the bottom of the page here: https://www.icann.org/ids. Presentations and recordings will also be posted to this page after the event. Best, Jennifer From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Denise Michel <denisemichel(a)fb.com> Date: Monday, April 29, 2019 at 10:21 PM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] FYI - ICANN DNS Symposium Hi, All. I was wondering if anyone is attending this symposium: The third ICANN DNS Symposium (IDS 2019) will be held 10-11 May 2019 in Bangkok, Thailand at the Shangri-La hotel. The IDS 2019 is co-locating with the fifth GDD Industry Summit (6-9 May 2019), the Registration Operations Workshop - ROW (9 May 2019) and the DNS OARC meeting (12-13 May 2019). The theme for the ICANN DNS Symposium (IDS) 2019 is: "Understanding the Security, Stability and Resiliency of the Domain Name System". IDS 2019 will focus on emerging technologies, protocols and other issues that may affect the security, stability, or resiliency of the Domain Name System. https://www.icann.org/ids [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_ids&d=Dw…> Hi, Staff. Could you provide us with copies of IDS presentations and let us know if remote participation and recordings will be available? Thanks. Denise Denise Michel denisemichel(a)fb.com<mailto:denisemichel@fb.com>

3 2

ICANN SSR answers
by Jennifer Bryce May 1, 2019

May 1, 2019

Dear Scott, dear Noorul, The below answer in highlight has been added to the Q&A Google doc: https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7… [docs.google.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_docume…>. Please let us know if you have any questions. Review Team volunteers: Scott, Noorul Workstream: ICANN SSR Topic 4: Perform an assessment of how effectively ICANN has implemented its Security Incident Management and Response Processes to reduce (pro-active and reactive) the probability of DNS-related incidents. Outstanding questions: 0 Q: Which certifications is ICANN pursuing for the organisation and staff? A: The certifications undertaken in ICANN are dependent on job function, and on a needs basis. For instance, InfoSec team members and all operations members complete and maintain GIAC SANS security modules. Software engineers are incentivised to undertake Secure Software Development Lifecycle training. ICANN Managed Root Server Team members have and maintain ITIL certifications. And all staff undergo mandatory yearly end user security training that encompasses infosec hygiene practices for end users, and awareness on phishing, spear-phishing, and other social engineering attempts. Q: Which certifications and compliance frameworks has ICANN completed? A: ICANN was following the Center for Internet Security (CIS) controls framework, after selecting 20 controls that best applied to ICANN business and operations. Recently the decision was made to move aware from CIS as it has shortcoming for the type of environment in which ICANN exists. The future framework of choice will be the NIST Cyber Security Framework (CSF) which is a better fit for ICANN and has a higher propensity for increasing the security posture to meaningful levels, inclusive of reviewing processes, for the entire ICANN Org. Work has commenced on building the ICANN Org CSF profile. Q: Who are ICANN’s auditors, what audits are completed regularly? A: Until recently ICANN used Leidos to complete its annual CIS audit. This has now been paused until the CSF work is done within ICANN, and an evaluation on auditors (for the ability to audit against CSF profiles) has been completed. -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

SSR2 Technical Writer
by Negar Farzinnia April 30, 2019

April 30, 2019

Dear members of the SSR2 Review Team, As you may be aware, ICANN org has been working diligently, on your behalf, to engage a Technical Writer for the SSR2 Review based on the criteria the SSR2 Review Team identified as required for this role. ICANN org’s due diligence efforts followed ICANN’s standard practice used for other similar assignments. Due diligence included evaluations by our Talent Acquisition and Communications teams. There were 12 candidates submitted for the Temporary Technical Writer assignment. The candidates included individuals referred by the SSR2 Review Team and those sourced by ICANN’s Talent Acquisition team. All candidates were carefully considered based on the job description criteria (see attached). Short-listed candidates were each interviewed by MSSI, Talent Acquisition, and Communications teams to gain a thorough understanding of their experiences vs. the job requirements. We have identified two suitable candidates that could both, potentially, fulfill this role. Please review their resumes (attached) and highlights of their credentials below: Candidate (A): * Over 18 years deep experience in technical writing for both private & public sectors * Master’s Degree * Experience writing for technical & non-technical audiences * Has written contents of various lengths, long reports with footnotes, etc. * Experience traveling internationally, and has held various contract roles for other technical companies. Candidate (B): * Over 18 years of experience in consulting and facilitation * Bachelor’s Degree, relevant technical certifications & membership * Has written strategy articles, including standards and policies * Experience traveling internationally, and has held various contract roles for other technical companies. * Some ICANN experience but not significant enough to outweigh the other candidate’s technical writing skills Both are considered very strong candidate but candidate “A” is recommended due to their superior technical writing skills and experience. Please review this information and provide your selection by 23:59 UTC on Tuesday, 30 April 2019. Both candidates are available to start right away, prepared to travel to Brussels in May and Marrakech in June, and contracting will be completed within a few days after the SSR2 provides their selection. Kind regards, Negar

2 1