<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'>Recent discussions in the Security Incident Reporting (SIR) Work Party have focused on the details, authorities, and capabilities of an RSS Governance Structure (GS). We would like to bring the group back out of these details as they should not impact the work being addressed. We are making recommendations for SIR based on what we think should be done for the benefit of the RSS and the DNS community. The definition of "RSS GS" from RSSAC058 is as follows:</span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'> </span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'> The RSS Governance Structure, being the structure that provides organizational governance of the RSS, as adopted and amended from time to time</span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'> </span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'>We think that recommendations for SIR should not be different based on which body will perform the governance function. While we understand that different governance bodies may have different authorities and capabilities, our recommendations should focus on the foundations of incident reporting and leave the implementation details to the GS itself. The work party is only making recommendations and will have no authority to require their implementation.</span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'> </span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'>Our recommendation for the work party document is to adopt the definition of "RSS GS" from RSSAC058, remove references to RootOps, and explicitly state that we are not writing this document to focus on a specific governance body or implementation of a GS. There may be other places in the document that should be aligned as well.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'>We look forward to a productive discussion tomorrow.</span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'> </span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121;mso-ligatures:none'>RSSAC Caucus Security Incident Reporting Admin Team</span><span style='font-size:12.0pt;color:#212121;mso-ligatures:none'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>