<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1577397654;
mso-list-template-ids:470191002;}
@list l1
{mso-list-id:1967273895;
mso-list-template-ids:1997690804;}
@list l1:level1
{mso-level-start-at:13;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level1 lfo2
{mso-level-start-at:0;
mso-level-numbering:continue;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:0in;
text-indent:0in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027"/>
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Dear SSR2 RT,<span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The below answers have been added to the Q&A Google doc: <a href="https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7lsco/edit?usp=sharing">https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7lsco/edit?usp=sharing</a>.
Please let us know if you have any questions.<o:p></o:p></p>
<p class="MsoNormal"> <b> </b><o:p></o:p></p>
<p class="MsoNormal"><b>Review Team volunteers: <span style="background:yellow;mso-highlight:yellow">Laurin,
</span></b><span style="background:yellow;mso-highlight:yellow">Norm, Denise, Eric, Scott, Matogoro</span><o:p></o:p></p>
<p class="MsoNormal"><b>Workstream: Future Challenges </b><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><b>Topic: Access to data and info: Research on important abuse and attack vectors</b><o:p></o:p></p>
<p class="MsoNormal"><b>Outstanding questions: 0 </b><o:p></o:p></p>
<p class="MsoNormal"><b> <o:p></o:p></b></p>
<p class="MsoNormal">Q:<b> </b><span style="color:black">Does the TEG or some other group provide information about (future) abuse and attack vectors? Where?<o:p></o:p></span></p>
<p class="MsoNormal">A: There is no single and centralized repository for abuse and attack vectors maintained by ICANN.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Review Team volunteers: <span style="background:yellow;mso-highlight:yellow">Russ,
</span></b><span style="background:yellow;mso-highlight:yellow">Kerry-Ann, Naveed</span><o:p></o:p></p>
<p class="MsoNormal"><b>Workstream: ICANN SSR </b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt">Topic 5: Perform an assessment of internal security, stability and resiliency of ICANN's operat</span>ion processes and services.</b><b><span style="font-size:12.0pt"><o:p></o:p></span></b></p>
<p class="MsoNormal"><b>Outstanding questions: 0 </b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline">Q: Previous question to ICANN org <i>“We've been told that this particular contract that supported ICANN's gathering of this data does not allow it to display all of this data. Once ICANN understands
what can and cannot be displayed, will they come back to the Board and community with the cost to report on everything? What would a new contract with a new provider potentially, or the same provider, need to look like in order to display more of that particular
data publicly, and what would it cost?"</i></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline">Previous answer from ICANN org <i>“There are two things conflated here. One is the cost of curating and validating the data. This is the major cost and is covered by ICANN's budget transparency.
The other is the cost of then defining which of the curated data we can publish and presenting that to the public. It is ICANN's intention to publish as much data that our licensing allows via ODI. This cost is not yet certain as we have not finalized the
possible output but it is likely to be minimal."</i></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline">This was reported on 15 months ago, what is the cost?</p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline">A: ICANN is contractually unable to release all data that it receives from its data providers. When this question was raised by the review team earlier, OCTO SSR queried the potential to be
able to provide the data in its entirety but the data providers are extremely resistant to do so as it dismantles their own business model.</p>
<p style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline"><o:p> </o:p></p>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:12.0pt;color:black">Review Team volunteers:
<span style="background:yellow;mso-highlight:yellow">Denise, </span></span></b><span style="font-size:12.0pt;color:black;background:yellow;mso-highlight:yellow">Kerry-Ann, Žarko</span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:12.0pt;color:black">Workstream: ICANN SSR<o:p></o:p></span></b></p>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:12.0pt;color:black">Topic 7:</span></b><span style="font-size:12.0pt;color:black">
<b>Perform an assessment how effectively ICANN has implemented its processes to ensure compliance regarding registrar agreements and the consensus policies.
<o:p></o:p></b></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:12.0pt;color:black">Oustanding questions: 12</span></b><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:12.0pt;color:black">Q: Is OCTO going to provide public information on DAAR and its findings and how much will that cost?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">A (updated to include cost information): ICANN started in February 2019, by publishing monthly reports from DAAR. We also intend to publish back dated reports. (Currently published back to June 2018.</span><a href="https://www.icann.org/octo-ssr/daar"><span style="color:black;text-decoration:none">
</span><span style="color:#1155CC">https://www.icann.org/octo-ssr/daar</span></a><span style="color:black">). Further publications may be possible and will be part of discussions with the community. Regarding cost, ICANN is contractually unable to release
all data that it receives from its data providers. When this question was raised by the review team earlier, OCTO SSR queried the potential to be able to provide the data in its entirety but the data providers are extremely resistant to do so as it dismantles
their own business model.</span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">-- </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><b><span style="color:#595959">Jennifer Bryce</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#595959">Senior Reviews Coordinator </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#595959">Internet Corporation for Assigned Names and Numbers (ICANN)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#595959">Email: jennifer.bryce@icann.org</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#595959">Skype: jennifer.bryce.icann</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="color:#595959">www.icann.org</span><o:p></o:p></p>
</div>
</body>
</html>