<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; ">
<div style="font-size: 16px; ">
<div>
<div>Below are the BC comments we submitted regarding the <span class="Apple-style-span" style="line-height: 23px; ">DNS Security & Stability Analysis (DSSA) Working Group Phase 1 report. </span></div>
<div><span class="Apple-style-span" style="line-height: 23px; "><br>
</span></div>
<div><span class="Apple-style-span" style="line-height: 23px; ">Thanks to Scott McCormick for his excellent draft. I worked Marilyn's comments in there before submitting. (<a href="http://forum.icann.org/lists/dssa-phase-1-report/msg00002.html">Link</a> to
comment view)</span></div>
</div>
</div>
<div style="font-size: 16px; "><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family: Optima; text-align: left; color: black; border-bottom-width: medium; border-bottom-style: none; border-bottom-color: initial; border-left-width: medium; border-left-style: none; border-left-color: initial; padding-bottom: 0in; padding-left: 0in; padding-right: 0in; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; border-top-style: solid; border-right-width: medium; border-right-style: none; border-right-color: initial; padding-top: 3pt; ">
<b style="font-size: 10pt; "><br>
</b><span style="font-weight: bold; ">Subject: </span>Business Constituency Comments on DSSA Working Group Phase 1 Report<br>
</div>
<div style="font-size: 16px; "><br>
</div>
<div style="font-size: 16px; ">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div><span class="Apple-style-span" style="line-height: 21px; ">The Business Constituency is concerned with the security and stability of the DNS, as it severely impacts our membership base. ICANN's decisions, in particular, impact the diverse and distributed
businesses whose infrastructure and services make the Internet work. </span></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<div><span style="line-height: 21px; ">The Phase 1 report shows the effort put forward to start addressing the types of risks to the global DNS as it pertains to security and stability, and is a welcome update on the progress of the WG. We </span><span style="line-height: 21px; ">urge
the DSSA WG to continue and complete the work defined by its charter. We look forward to a final report detailing the risks and threats to the security and stability of the DNS.</span></div>
</div>
<div><br>
</div>
<div><u>DSSA-WG Background:</u></div>
<div>
<p style="margin: 0px 0px 8px; line-height: 1.45em; background-color: rgb(255, 255, 255); position: static; z-index: auto; ">
The objective of the DSSA Working Group is to draw upon the collective expertise of the participating SOs and ACs, solicit expert input and advice and report to the respective participating SOs and ACs on: The actual level, frequency and severity of threats
to the DNS. </p>
</div>
</div>
</div>
</span>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<p style="margin: 0px 0px 8px; line-height: 1.45em; background-color: rgb(255, 255, 255); position: static; z-index: auto; ">
This is the first of two reports from the DNS Security & Stability Analysis Working Group. The goal of this document is to bring forward the substantial work that has been completed to date and describe the work that remains. This has been in many respects
a “pioneering” cross-constituency security-assessment effort that has developed knowledge and processes that others will hopefully find helpful and can be reused in the future.</p>
</div>
</div>
</div>
</span>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<p style="margin: 0px 0px 8px; line-height: 1.45em; background-color: rgb(255, 255, 255); position: static; z-index: auto; ">
The DSSA has:</p>
<ul style="margin: 10px 35px 18px 20px; padding-left: 15px; line-height: 21.75px; background-color: rgb(255, 255, 255); ">
<li style="margin-bottom: 5px; ">Established a cross-constituency working group and put the organizational framework to manage that group in place</li><li style="margin-bottom: 5px; ">Clarified the system, organizational and functional scope of the effort</li><li style="margin-bottom: 5px; ">Developed an approach to handling confidential information, should such information be required for certain assessments</li><li style="margin-bottom: 5px; ">Selected and tailored a risk-assessment methodology to structure the work</li><li style="margin-bottom: 5px; ">Developed and tested mechanisms to rapidly collect and consolidate risk-assessment scenarios across and broad and diverse group of interested participants</li><li style="margin-bottom: 5px; ">Used an “alpha-test” of those systems to develop the high-level risk-scenarios in this report. Those scenarios will serve as the starting point for the remainder of the effort.</li></ul>
</div>
</div>
</div>
</span>
<div><br>
</div>
<div><span class="Apple-style-span" style="line-height: 23px; ">Work that remains:</span></div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<ul style="margin: 10px 35px 18px 20px; padding-left: 15px; line-height: 21.75px; background-color: rgb(255, 255, 255); ">
<li style="margin-bottom: 5px; ">Perform a proof of concept to refine and streamline the methodology on one broad risk-scenario topic with the goal of reducing cycle time and making it more accessible to a broader community</li></ul>
</div>
</div>
</div>
</span><span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<ul style="margin: 10px 35px 18px 20px; padding-left: 15px; line-height: 21.75px; background-color: rgb(255, 255, 255); ">
<li style="margin-bottom: 5px; ">Roll the methodology out to progressively broader groups of participants to introduce the methodology to the community and further improve the process and tools on the way to completing the assessment.</li></ul>
</div>
</div>
</div>
</span><span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<ul style="margin: 10px 35px 18px 20px; padding-left: 15px; line-height: 21.75px; background-color: rgb(255, 255, 255); ">
<li style="margin-bottom: 5px; "><span class="Apple-style-span" style="line-height: normal; ">It is essential that this work involve businesses beyond ICANN's contracted parties, although such broad engagement is not sufficiently evident at this point. Outreach
should be expanded to the non-contracted parties who support Internet infrastructure and services.</span></li></ul>
</div>
</div>
</div>
</span>
<div><br>
</div>
<div>Rapportuer for these comments: Scott McCormick</div>
<div><br>
</div>
<div>Submitted by: Steve DelBianco, vice chair for policy coordination, Business Constituency</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<div><br>
</div>
</div>
</div>
</div>
</span></div>
</div>
</span>
</body>
</html>