[RSSAC Caucus] RSSAC Caucus Work Party on Security Incident Reporting

Sun Jul 7 21:00:54 UTC 2024

Recent discussions in the Security Incident Reporting (SIR) Work Party have focused on the details, authorities, and capabilities of an RSS Governance Structure (GS). We would like to bring the group back out of these details as they should not impact the work being addressed. We are making recommendations for SIR based on what we think should be done for the benefit of the RSS and the DNS community. The definition of "RSS GS" from RSSAC058 is as follows: 

The RSS Governance Structure, being the structure that provides organizational governance of the RSS, as adopted and amended from time to time 

We think that recommendations for SIR should not be different based on which body will perform the governance function. While we understand that different governance bodies may have different authorities and capabilities, our recommendations should focus on the foundations of incident reporting and leave the implementation details to the GS itself. The work party is only making recommendations and will have no authority to require their implementation. 

Our recommendation for the work party document is to adopt the definition of "RSS GS" from RSSAC058, remove references to RootOps, and explicitly state that we are not writing this document to focus on a specific governance body or implementation of a GS. There may be other places in the document that should be aligned as well. 

We look forward to a productive discussion tomorrow. 

RSSAC Caucus Security Incident Reporting Admin Team 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mm.icann.org/pipermail/rssac-caucus/attachments/20240707/03bd8da9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 8905 bytes
Desc: not available
URL: <https://mm.icann.org/pipermail/rssac-caucus/attachments/20240707/03bd8da9/smime.p7s>