<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Dear Colleagues,<br>
<br>
ICANN has disclosed that the email credentials of several
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
members of staff have been compromised. [1]<br>
<br>
I suggest that a credible scenario is the compromise of some
resource critical to some accountability process. The form of
compromise may be loss of the resource, such as the loss of a
cryptographic key, or the disclosure of the resource, such as email
credentials.<br>
<br>
The accountability process compromised could be any one or more of
the Corporation's ByLaws Redress Mechanisms [2], or those which are
external to the Corporation [3].<br>
<br>
I will follow up with Staff on the existing Business Continuity Plan
of Record, as credential loss and/or disclosure should fall within
the Corporation's BC PoR, and it may be somewhat pertinent at the
moment.<br>
<br>
Regards,<br>
Eric Brunner-Williams<br>
Eugene, Oregon<br>
<br>
<br>
[1] <a class="moz-txt-link-freetext" href="https://www.icann.org/news/announcement-2-2014-12-16-en">https://www.icann.org/news/announcement-2-2014-12-16-en</a><br>
[2] (a) Reconsideration, (b) Independent third-party review, (c)
Periodic review, and (d) Ombudsman.<br>
[3] (a) Affirmation of Commitments, (b) Jurisdiction of California
and the United States, (c) Other Jurisdictions, and (d) Contractual
requirements.<br>
</body>
</html>