[Ssr2-review] [EXT] Re: Recommendation Number 1

Wed Jan 29 12:52:39 UTC 2020

Just a thought

The exercise we spoke about - to have a matrix that links/cross reference all Inter-related recommendations- would that address any critique that we are duplicitous and non specific. I agree there is a need to be clear what we expect the outcome to be is without being prescriptive on how to do it and I think we can achieve it in the text. 

As I said just a thought 

Sincerely,
Kerry-Ann Barrett
Cybersecurity Policy Specialist
Organization of American States 

> On Jan 28, 2020, at 1:04 PM, Denise Michel <denisemichel at fb.com> wrote:
> 
> CAUTION: EXTERNAL SENDER
> 
> 
> I think we should keep the construct we have and add implementation guidance to SSR1 recommendations found not fully implemented.
> 
> Thanks.
> Denise
> 
> Denise Michel
> denisemichel at fb.com 
> 
> 
> On 1/27/20, 10:59 PM, "Ssr2-review on behalf of k claffy" <ssr2-review-bounces at icann.org on behalf of kc at caida.org> wrote:
> 
> 
> 
>    It's too late not to re-open the appendix, as I went at it
>    with my fine-tooth comb that transmogrified into a pitchfork.
>    some of that text is simply indefensible and must be substantiated
>    or removed.  i put my comments in the wrong google doc (the
>    marked up one instead of clean one) and heather offered to
>    move them to the right place during the calm between the storms.
> 
>    I'm right with you that we have to pull out exactly what we
>    recommend for all the SSR1-Incompletes, as our biggest
>    gripe about the SSR1 recs were how un-SMART they were.  we
>    cannot follow that gripe with "btw, go finish all of them, and
>    go look in the appendix where we hide many additional 
>    recommendations, but also generally do not provide any SMART 
>    version of what we recommend, nor even use the word "recommend".
> 
>    But, rather than have 27 new subrecommendations under
>    Recommendation 1, a bunch of which just point to other
>    Recommendations, I think we need to pull any SSR1 work
>    out into new recommendations, or drop them.  The document
>    is just spaghetti o/w.
> 
>    But I am all in favor of someone else undergoing the exercise
>    Russ suggests because it will illuminate the problem.
> 
>    grumpy.
>    k
> 
> 
> 
>>    On Mon, Jan 27, 2020 at 02:26:17PM -0500, Russ Housley wrote:
>> 
>> I have been thinking about the SSR1-related discussion on the team call last week.  To avoid opening the SSR1 appendix back up, I am thinking that we could change Recommendation 1 to be VERY specific.  Yes, I am aware that this suggestion is at odds with the ICANN SME plea that we "over engineer" our recommendations.  However, this suggestion does provide a clear way for SSR3 to measure our first recommendation.  I suggest that we structure the recommendation like this:
>> 
>> Finish implementing SSR1 recommendations by:
>> 
>> - Rec 1: Do X
>> - Rec 2: Do Y
>> ...
>> - Rec 9: See SSR2 Rec 2
>> - Rec 10: Do ...
>> - Rec 11: Do ...
>> - Rec 12: See SSR2 Rec 3
>> ...
>> - Rec 20: See SSR2 Rec 4
>> ...
>> - Rec 26: (No further action needed)
>> - Rec 27: See SSR2 Rec 5
>> - Rec 28: Do Z
>> 
>> 
>> This approach tells the ICANN staff what we looked for and did not find, yet it would avoid reopening the appendix.  What do you think?
>> 
>> Russ
>> 
> 
>> _______________________________________________
>> Ssr2-review mailing list
>> Ssr2-review at icann.org
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__mm.icann.org_mailman_listinfo_ssr2-2Dreview&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=8iNBULM9d6y0RkLQcVKYfkFngKdA19OkW0h2_5IJ0zc&e= 
>> 
>> _______________________________________________
>> By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=zcCfmKIfbp0JMMFsPmxHbF16MqJz1wTvbsJZoX6nVKk&e= ) and the website Terms of Service (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=JMW6vmeNhSeMftx1gUOT2-DiH6_pivniRsqgwv4YGck&e= ). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
> 
>    _______________________________________________
>    Ssr2-review mailing list
>    Ssr2-review at icann.org
>    https://urldefense.proofpoint.com/v2/url?u=https-3A__mm.icann.org_mailman_listinfo_ssr2-2Dreview&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=8iNBULM9d6y0RkLQcVKYfkFngKdA19OkW0h2_5IJ0zc&e= 
> 
>    _______________________________________________
>    By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=zcCfmKIfbp0JMMFsPmxHbF16MqJz1wTvbsJZoX6nVKk&e= ) and the website Terms of Service (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=MWVuq3jZIw5gwhGdDf-HWNL4CEWIsdUnt9gOgplCArM&m=4aImHXVhlXOtWBXvEmhkEpDoZV0zrQSS3dhi-RIX8EM&s=JMW6vmeNhSeMftx1gUOT2-DiH6_pivniRsqgwv4YGck&e= ). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
> 
> 
> _______________________________________________
> Ssr2-review mailing list
> Ssr2-review at icann.org
> https://mm.icann.org/mailman/listinfo/ssr2-review
> 
> _______________________________________________
> By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.