- Ssr2-review - lists.icann.org

ACTION NEEDED: Input to SO/AC response note
by Jennifer Bryce Nov. 7, 2017

Nov. 7, 2017

Hi all, The below draft note to SO/AC Chairs was developed by the RT members during the F2F meeting today. Please read, and share any edits or input by 23.59 UTC on Sunday 5 November. ------------------ Dear SO/AC Chairs; Please find enclosed a description of the SSR2 Review Team’s perspective the Scope of this review. As requested, the SSR2 is completing requested item to “[resolve] the issues identified and discussed before and during ICANN60 related to scope”. Scope The SSR2 RT has operated and conducted its work according to its adopted scope (detailed in its Terms of Reference<https://community.icann.org/download/attachments/64076120/SSR2-TermsofRefer…> document), which was adopted by consensus of the SSR RT on 4 May 2017. We would like to offer some general clarifications and comments about the choices in the approach to scope that we hope will be helpful to the SO and AC chairs in considering the parameters associated with resuming this effort: Breadth vs. Depth: We believe that it is more helpful to look at breadth in such a review, and look at the broader aspects of security, stability and resiliency rather than dive into depth in just a small number of issues. Capability vs. Behaviours: We believe that it is more helpful in the context of this review to look at the capability of ICANN to manage issues related to security, stability and resilience rather than being overly prescriptive as to how ICANN should respond to particular circumstances that have arisen in the past or may arise in the future. Perspective vs. Prescription: We believe that it is more helpful to review aspects of institutional awareness and capability of topics related to security, stability, and resiliency, rather than provide a detailed prescription of the appropriate responses to be used in particular cases. We hope this meets your requirements regarding the review team’s perspective on the scope of this review. The current working terms of references for the review team’s efforts up to the point of this pause in our actions, including a detailed view of the scope of the review, can be found in the reference document cited above. Please let us know if you require anything further. Regards, The Second Security, Stability, and Resiliency Review Team (SSR2 RT) -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

5 5

Fw: 2ND REMINDER: REMINDER: SSR2 Meeting BRU: Matogoro, Jabhera | SSR2 - DXB | Welcome Email – RESPOND BY: WEDNESDAY, 6 SEPTEMBER 2017
by jaberamatogoro＠gmail.com Nov. 6, 2017

Nov. 6, 2017

Dear Co-chairs, I am aware that we are currently on “pause” status for any SSR2 RT related activities. I have been contacted for this request although I already submitted my travel request. The only concern is that to get a permission to travel abroad need to submit a permission letter to my employer and then a letter after employer approval to President’s Office for final decision. This may take one month to two months. Do we still need to proceed with the request logistics or wait until we receive the “un-pause” notification? I know this is not within your capacity but it is important to be noted. If that is the case, I will need an invitation letter for this event, accommodation and flight confirmation to support my request from both the employer and President’s Office. Regards, Matogoro Sent from Windows Mail From: ICANN Constituency Travel Sent: ‎Monday‎, ‎November‎ ‎6‎, ‎2017 ‎11‎:‎56‎ ‎PM To: jaberamatogoro(a)gmail.com Cc: ICANN Constituency Travel, Yvette Guigneaux, MSSI Secretariat Dear Jabhera, This is a friendly 2nd reminder to please log in to the FCM portal and submit your travel request for the upcoming SSR2 Meeting in Brussels. Thank you. Best wishes, Nichole Kennedy Travel Support Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Fax: +1 310 823 8649 Email: constituency-travel(a)icann.org www.icann.org From: Constituency Email <constituency-travel(a)icann.org> Date: Friday, September 29, 2017 at 11:31 AM To: "jaberamatogoro(a)gmail.com" <jaberamatogoro(a)gmail.com> Cc: Constituency Email <constituency-travel(a)icann.org> Subject: REMINDER: SSR2 Meeting BRU: Matogoro, Jabhera | SSR2 - DXB | Welcome Email – RESPOND BY: WEDNESDAY, 6 SEPTEMBER 2017 Dear Jabhera, This is a friendly reminder to please log in to the FCM portal and submit your travel request for the upcoming SSR2 Meeting in Brussels. Thank you. Best wishes, Nichole Kennedy Travel Support Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Fax: +1 310 823 8649 Email: constituency-travel(a)icann.org www.icann.org From: Constituency Email <constituency-travel(a)icann.org> Date: Wednesday, August 30, 2017 at 5:00 PM To: "jaberamatogoro(a)gmail.com" <jaberamatogoro(a)gmail.com> Cc: Constituency Email <constituency-travel(a)icann.org> Subject: SSR2 Meeting BRU: Matogoro, Jabhera | SSR2 - DXB | Welcome Email – RESPOND BY: WEDNESDAY, 6 SEPTEMBER 2017 Dear Jabhera Matogoro: We are pleased to inform you that ICANN will be providing financial support for you to attend the SSR2 Meeting in Brussels, Belgium during January 21-25, 2018. As a member of ICANN’s SSR2 Program, ICANN will be responsible for the following expenses below for you to attend the meeting. - Airfare: YES o Class: Economy - Hotel: YES o Approved Check-in: Sunday, January 21, 2018 o Approved Check-out: Thursday, January 25, 2018 - PER DIEM: YES COMPLETE THE FOLLOWING: 1) REGISTER / LOG-IN at FCM Portal FCM Portal Address: https://portal.fcm.travel/consuae New User Registration: Enter Company Code: DXBFB37TC-ICANNCONSUAE 2) COMPLETE / UPDATE your FCM Profile We will not be able to provide any travel assistance without a completed FCM Travel Profile. Instructions on how to complete your FCM Profile can be found here: https://community.icann.org/display/trvlconstit/Create+an+FCM+Portal+Profile 3) SUBMIT your travel request via the Travel Request Web Form in the portal. MAIN PAGE BOOKING TAB DUE DATES: 1) TRAVEL REQUEST FORMS: WEDNESDAY, 6 SEPTEMBER 2017 TRAVEL BOOKING: AIR: Primary contact for booking air travel reservations: FCM: ICANN.Constituent(a)ae.fcm.travel ICANN: constituency-travel(a)icann.org Air Self-booking: You must receive approval from ICANN prior to making your self-arranged trip. Please notify ICANN in writing and prior to booking at constituency-travel(a)icann.org. MISC. OTHER: If you have any change in your banking details, please re-submit a completed Travel Vendor Form via: https://travelrequestform.icann.org/ If there are any last minute changes, if you cannot travel due to illness, personal or professional events, you MUST contact ICANN Constituency Travel at constituency-travel(a)icann.org VISA AND INVITATION LETTERS: If you need a visa to enter the country, please go to our invitation letter webpage at: https://invitationletters.icann.org/ For visa information, please visit: https://community.icann.org/x/fSfxAg We look forward to working with you and please do not hesitate to contact us with any questions. Best wishes, Joseph de Jesus Travel Support Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: constituency-travel(a)icann.org Fax (Private): +1-424-832-1074 www.icann.org

1 0

Fwd: LA meeting notes - draft
by Geoff Huston Nov. 6, 2017

Nov. 6, 2017

Hi, I had a query running through the week about the documentation of the LA meeting, as I did not see any material that was pushed out as a result of that meeting. Zarko kindly found the report for me, and I hope he does not mind if I circulate his note to the rest of the SSR2 list so we all have a current pointer to these meeting notes regards, Geoff > Begin forwarded message: > > From: Žarko Kecić <Zarko.Kecic(a)rnids.rs> > Subject: LA meeting notes - draft > Date: 2 November 2017 at 10:03:59 am GMT+4 > To: Geoff Huston <gih(a)apnic.net> > > Hi Geoff, > > > > I also had a hard time finding the document. It is on google docs, but no link from SSR2 wiki page. You can get it at: > > > > https://docs.google.com/document/d/1QsvBp4GNW_TILEos29YQxTb4ZH7qcQFAh_4e0Xg… <https://docs.google.com/document/d/1QsvBp4GNW_TILEos29YQxTb4ZH7qcQFAh_4e0Xg…> > > > I’ll ask staff to update SSR2 document list. > > > > Zarko >

3 2

Skill set timeline
by Denise Michel Nov. 6, 2017

Nov. 6, 2017

Dear Team Members: As agreed at our 3 Nov. meeting, we’re developing a skills matrix<https://docs.google.com/spreadsheets/d/1AldO8HkV4l0ftxOCHph8sk71LlrJhB1nLU6…> on an accelerated schedule to respond to the SO/AC chairs request (see previous emails): Mon 6 Nov 15:00 UTC—If you have additions or edits to the draft skills set matrix, please share them by this deadline. Tue 7 Nov 15:00 UTC —Team plans to resolve any outstanding edits by this deadline. Thurs 9 Nov 15:00 UTC —Each Team member will complete the matrix by this deadline; a transmittal note will be circulated for edits. Fri 10 Nov 15:00 UTC —If you have any edits to a draft transmittal note, please share them by this deadline. Fri 10 Nov 22:00 UTC—Skills matrix sent to SO/AC chairs. While the chairs did not give us a deadline, the SSAC chair urged quick action, and we want to expedite this response to the chairs as it apparently factors into the limbo in which we find ourselves, Do let us all know immediately if you can’t meet this schedule or have questions (especially those who did not participate in the 3 Nov. meeting). Best Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com>

2 1

SSR2 scope google document
by Denise Michel Nov. 5, 2017

Nov. 5, 2017

Hi, Staff: Would you please allow all SSR2 Team members to edit the “Scope of the Review” draft google doc, ASAP. Hi, Team Members: I’m in transit. Please let us know if you have problems accessing the google doc and we’ll make alternate arrangements. The current text is included below, FYI. Feel free to share edits/comments on the email list. Best, Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com> DRAFT GOOGLE DOC Dear SO/AC Chairs; Please find enclosed a description of the SSR2 Review Team’s perspective the Scope of this review. As requested, the SSR2 is completing requested item to “[resolve] the issues identified and discussed before and during ICANN60 related to scope”. Scope The SSR2 RT has operated and conducted its work according to its adopted scope (detailed in its Terms of Reference<https://community.icann.org/download/attachments/64076120/SSR2-TermsofRefer…> document), which was adopted by consensus of the SSR RT on 4 May 2017. We would like to offer some general clarifications and comments about the choices in the approach to scope that we hope will be helpful to the SO and AC chairs in considering the parameters associated with resuming this effort: Breadth vs. Depth: We believe that it is more helpful to look at breadth in such a review, and look at the broader aspects of security, stability and resiliency rather than dive into depth in just a small number of issues. Capability vs. Behaviours: We believe that it is more helpful in the context of this review to look at the capability of ICANN to manage issues related to security, stability and resilience rather than being overly prescriptive as to how ICANN should respond to particular circumstances that have arisen in the past or may arise in the future. Perspective vs. Prescription: We believe that it is more helpful to review aspects of institutional awareness and capability of topics related to security, stability, and resiliency, rather than provide a detailed prescription of the appropriate responses to be used in particular cases. We hope this meets your requirements regarding the review team’s perspective on the scope of this review. The current working terms of references for the review team’s efforts up to the point of this pause in our actions, including a detailed view of the scope of the review, can be found in the reference document cited above. Please let us know if you require anything further. Regards, The Second Security, Stability, and Resiliency Review Team (SSR2 RT)

2 1

Access to skill set google doc
by Denise Michel Nov. 3, 2017

Nov. 3, 2017

Hi, Staff: Would you please allow all SSR2 Team members to edit the “SSR2 Skills” draft google doc, ASAP. Thanks. Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com>

1 0

Intro remarks on Friday
by Don Blumenthal Nov. 3, 2017

Nov. 3, 2017

I checked with Patrik and Rod about a question during today’s meeting. To the extent that it matters, we should take the remarks by Rod and him as coming from both the chairs and SSAC. Don

1 0

initial text
by Geoff Huston Nov. 3, 2017

Nov. 3, 2017

Scope of the Review We have been requested as part of the final actions of this review team before the requested pause takes effect to offer some comments about the scope of this review. The fine level details of the scope of this review are, quite properly, the topic for the resumed review team, and it would be inappropriate for us to prejudge that effort, particularly as we understand that there will be an augmented team and potentially some changes in focus and timeline. We would like to offer some general comments about the choices in the approach to scope that we hope will be helpful to the SO and AC chairs in considering the parameters associated with resuming this effort: Breadth vs Depth: We believe that it is more helpful to look at breadth in such a review, and look at the broader aspects security, stability and resiliency rather then dive into depth in one or two issues Capability vs Behaviours: We believe that is is more helpful in the context of this review to look at the capability of ICANN to manage issues related to security, stability and resilience rather than being prescriptive as to how ICANN should respond to particular circumstances Competence vs Cases: We believe that it is more helpful to review the levels of awareness of security and security rather than perform a detailed [..] We hope this is helpful to your efforts to […]

2 1

Fwd: Skills requirements input ideas for SSR2-RT
by Osterweil, Eric Nov. 2, 2017

Nov. 2, 2017

Hi team, Please see the email from ssac (below). Please let the list know what you all think, and any opinions or input you have. Thanks! Eric Sent from my iPhone Begin forwarded message: From: Rod Rasmussen <rod(a)rodrasmussen.com<mailto:rod@rodrasmussen.com>> Date: November 2, 2017 at 3:41:49 PM GMT+4 To: Denise Michel <denisemichel(a)fb.com<mailto:denisemichel@fb.com>>, "Osterweil, Eric" <eosterweil(a)verisign.com<mailto:eosterweil@verisign.com>>, Don Blumenthal <dmb(a)donblumenthal.com<mailto:dmb@donblumenthal.com>>, "Geoff Huston" <gih(a)apnic.net<mailto:gih@apnic.net>> Cc: Patrik Fältström <patrik(a)frobbit.se<mailto:patrik@frobbit.se>> Subject: [EXTERNAL] Skills requirements input ideas for SSR2-RT Hi Folks, As we talked about in our informal get-together tomorrow, a few of us from SSAC have pulled together a list of skills applicable to doing a lot of the work you are tasked with from our own skills survey and own experiences. This is informal and not an official SSAC communication, but rather represents input we gathered quickly from several of our members to help you with the issues we know you’ve been wrestling with on the area of necessary skills. We also know that we have some SSAC members interested in joining the SSR2-RT to help with the next phase of your work to help fill some of the gaps you may have should the SO/AC Chairs wish to name more members, which I personally hope happens. I will be sending this e-mail to the entire SSAC as well so they are up-to-speed on our assistance and individual members may have some further thoughts to add at some point. I am sending this to the co-chairs and the SSAC appointees to SSR2 in order to make sure it gets disseminated, as I of course cannot send to the list itself. Please feel free to get back to us with any questions - best through our appointees Geoff and Don so they can send those around and get feedback. I, of course, stand ready to assist in any way I can in my personal capacity, and am happy to chat with any/all of you about ways some or all of us in SSAC can help or provide some advice. We ALL want this to end with a highly successful review! Cheers, Rod ================================ With this list we hope that the SSR2-RT can: 1. state which of its members has skills/experience in each area. (Suggest a Matrix: one axis with skills, other axis with members) 2. look at the its mandate points and tasks (notably the 28 recommendations from SSR1) and determine which skills/experience areas are relevant to each. (Suggest a Matrix: one axis with recommendations/mandate/whatever, other axis with skill/experience.) This exercise should reveal whether there are any gaps on the SSR2 team that need to be filled. Some of the below are practice areas (such as Information Security). Some are areas of subject expertise that are important to mention specifically (for example, directory services operations). Some practice areas may assume or cover certain subjects. (For example, risk analysis may assume knowledge of disaster planning and recovery.) Didn’t want to get too granular. In a matrix they could all be on one list, undifferentiated. Practice areas: Information Security (IS) Information Technology (IT) Project management Security auditing and standards Risk assessment / analysis Data analytics Contractual compliance Subject expertise: DNS Network architecture/design and operations Root server operations Directory services operations ICANN policy ICANN strategic plan and budget PTI functions Internet protocols Penetration testing

4 3

attendance SSR2 meeting 3 Nov
by Denise Michel Nov. 2, 2017

Nov. 2, 2017

CORRECTED: Attending Denise Eric Geoff Kaveh Noorul Ameen Norm Ram Krishna Žarko Remote Attending Matogoro Don Not Attending Boban James Mohamad Amin Kerry-Ann Alain From: <ssr2-review-bounces(a)icann.org> on behalf of Denise Michel <denisemichel(a)fb.com> Date: Thursday, November 2, 2017 at 11:07 AM To: SSR2 <ssr2-review(a)icann.org>, ssr2-coordination <ssr2-coordination(a)icann.org> Subject: [Ssr2-review] Tomorrow's SSR2 meeting - attendance Hi. Staff – please re-send tomorrow’s attendance list when you have a chance. All – please send an email to the list if there’s a change, Thanks Denise Denise Michel Domain Name System Strategy & Management Facebook, Inc. denisemichel(a)fb.com<mailto:denisemichel@fb.com>

1 0