<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoPlainText">Hi Boban,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The transcripts from the ICANN SSR meeting in LA were posted to the meeting page in the weeks following the meeting, here:
<a href="https://community.icann.org/x/KRghB">https://community.icann.org/x/KRghB</a>.
</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">A record of all the questions and answers related to the ICANN SSR work are posted to the workstream page of the wiki here:
<a href="https://community.icann.org/x/KRghB">https://community.icann.org/x/KRghB</a>. For any questions outstanding, the latest delivery date is included in the table.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Please let us know if there are other items you consider to be outstanding, as noted in your email below.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Best,</p>
<p class="MsoPlainText">Jennifer </p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">From: Ssr2-review <ssr2-review-bounces@icann.org> on behalf of Boban Krsic <krsic@denic.de><o:p></o:p></p>
<p class="MsoPlainText">Date: Wednesday, November 14, 2018 at 5:28 AM<o:p></o:p></p>
<p class="MsoPlainText">To: "ssr2-review@icann.org" <ssr2-review@icann.org><o:p></o:p></p>
<p class="MsoPlainText">Subject: Re: [Ssr2-review] SSR2 8 Nov agenda<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"> Hi all,<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> On 08.11.18 14:31, Boban Krsic wrote:<o:p></o:p></p>
<p class="MsoPlainText"> > As already mentioned, I will send the current status of ICANN SSR to the<o:p></o:p></p>
<p class="MsoPlainText"> > mailing list by next Monday.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> okay, it's Wednesday, but here we go:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> As already mentioned, here is a short update on the current status of<o:p></o:p></p>
<p class="MsoPlainText"> the WS2 ICANN SSR. All information about the last official task (F2F in<o:p></o:p></p>
<p class="MsoPlainText"> Los Angeles, CA) can be found in the wiki at<o:p></o:p></p>
<p class="MsoPlainText"> https://community.icann.org/pages/viewpage.action?pageId=69277737. For<o:p></o:p></p>
<p class="MsoPlainText"> completeness here once again the summary of the meeting in LA:<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> The ICANN SSR Subgroup had a very productive two-day, fact-finding<o:p></o:p></p>
<p class="MsoPlainText"> meeting at ICANN headquarters in Los Angeles. The subgroup met with a<o:p></o:p></p>
<p class="MsoPlainText"> number of ICANN staff subject matter experts and discussed a range of<o:p></o:p></p>
<p class="MsoPlainText"> issues relating to the completeness and effectiveness of ICANN’s<o:p></o:p></p>
<p class="MsoPlainText"> security processes and the effectiveness of the ICANN security framework<o:p></o:p></p>
<p class="MsoPlainText"> (including activities connected to the SSR2 Terms of Reference and<o:p></o:p></p>
<p class="MsoPlainText"> implementation of SSR1 recommendations). Topics were covered to varying<o:p></o:p></p>
<p class="MsoPlainText"> degrees of detail as warranted; some topics were covered sufficiently<o:p></o:p></p>
<p class="MsoPlainText"> and some will require follow-on discussions.<o:p></o:p></p>
<p class="MsoPlainText"> The subgroup reviewed, submitted questions & information requests about,<o:p></o:p></p>
<p class="MsoPlainText"> and discussed early observations about:<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s Security Framework and emerging threats<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s Risk Management Framework<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s Business Continuity strategies, objectives, plans and procedures<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s operational planning and controls, and prioritized activity<o:p></o:p></p>
<p class="MsoPlainText"> recovery strategy<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s Incident Response Structure<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s root server operations<o:p></o:p></p>
<p class="MsoPlainText"> * ICANN’s Global Domains Division activities that relate to SSR<o:p></o:p></p>
<p class="MsoPlainText"> objectives, including:<o:p></o:p></p>
<p class="MsoPlainText"> * New gTLD program SSR-related safeguards<o:p></o:p></p>
<p class="MsoPlainText"> * Emergency Back-End Registry Operator (EBERO), and related processes,<o:p></o:p></p>
<p class="MsoPlainText"> and testing<o:p></o:p></p>
<p class="MsoPlainText"> * Registry Data Escrow (RyDE) program and Data Escrow Agents (DEA)<o:p></o:p></p>
<p class="MsoPlainText"> * Centralized Zone Data Service (CZDS) compliance, failures, plans<o:p></o:p></p>
<p class="MsoPlainText"> * Vetting of registrar and registry operators as relates to SSR, and<o:p></o:p></p>
<p class="MsoPlainText"> measurement & impact of malicious conduct by contracted parties,<o:p></o:p></p>
<p class="MsoPlainText"> databreaches, etc.<o:p></o:p></p>
<p class="MsoPlainText"> * SLA Monitoring System (SLAM)<o:p></o:p></p>
<p class="MsoPlainText"> * Abuse reports, including SADAG and DAAR (Statistical Analysis of DNS<o:p></o:p></p>
<p class="MsoPlainText"> Abuse & Domain Abuse Activity Reporting)<o:p></o:p></p>
<p class="MsoPlainText"> * SSR objectives in ICANN’S standard operating procedures (SOP).<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> We started immediately in the meeting to bring the essential aspects to<o:p></o:p></p>
<p class="MsoPlainText"> paper<o:p></o:p></p>
<p class="MsoPlainText"> https://docs.google.com/document/d/145i1Q-ZXgsvuwpDIUi_jJt_WJlaCRoxBoh2vKtNvSrM/edit.<o:p></o:p></p>
<p class="MsoPlainText"> Unfortunately we couldn't finish the document because of the<o:p></o:p></p>
<p class="MsoPlainText"> "pause-process". Now, after more than a year, remembering the results of<o:p></o:p></p>
<p class="MsoPlainText"> the meeting is a very challenging task. But maybe we can use the<o:p></o:p></p>
<p class="MsoPlainText"> document as a starting point to restart the task.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> As you can see, we have structured the above mentioned topics into seven<o:p></o:p></p>
<p class="MsoPlainText"> groups. We assigned the team members among the individual groups, with<o:p></o:p></p>
<p class="MsoPlainText"> the aim of parallel processing and taking into account the individual<o:p></o:p></p>
<p class="MsoPlainText"> expertise of each SSR2 team member. The goal was to assign at least two<o:p></o:p></p>
<p class="MsoPlainText"> persons to a topic-group.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> We used Trello https://trello.com/b/5Eu1ppuv/ssr2-subtopic-2-icann-ssr<o:p></o:p></p>
<p class="MsoPlainText"> for the organization of the work. We can now stick to it, or just use<o:p></o:p></p>
<p class="MsoPlainText"> the document referenced in the previous paragraph to organize the groups<o:p></o:p></p>
<p class="MsoPlainText"> and work.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> In conclusion, the meeting was really effective and productive.<o:p></o:p></p>
<p class="MsoPlainText"> Unfortunately, we haven't received a summary (transcript) of the<o:p></o:p></p>
<p class="MsoPlainText"> meeting's content yet, as this task was taken over by the MSSI<o:p></o:p></p>
<p class="MsoPlainText"> secretariat. Nor do we have any records or evidences. IMHO both are<o:p></o:p></p>
<p class="MsoPlainText"> still outstanding.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> To those who have also been in LA: Please just add if I forgot something ;-)<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> Thanks and best regards, Boban.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
</div>
</body>
</html>