Page History

Background

The Security, Stability, & Resiliency Review is one of the four Specific Reviews. Under

Objectives of the SSR2 Review

Under the Bylaws, Section 4.6(c) , ‘The Board shall cause a of the ICANN Bylaws, ICANN is obligated to conduct a periodic review of ICANN’s execution of its commitment to enhance the operational stability, reliability, resiliency, security, and global interoperability of the systems and processes, both internal and external, that directly affect and/or are affected by the Internet’s system of unique identifiers that ICANN coordinates (“SSR Review”).’

The issues that the review team for the SSR Review (“SSR Review Team”) may assess are the following:

1. security, operational stability and resiliency matters, both physical and network, relating to the coordination of the Internet’s system of unique identifiers;
2. conformance with appropriate security contingency planning framework for the Internet’s system of unique identifiers;
3. maintaining clear and globally interoperable security processes for those portions of the Internet’s system of unique identifiers that ICANN coordinates.

The SSR Review Team shall also assess the extent to which ICANN has successfully implemented its security efforts, the effectiveness of the security efforts to deal with actual and potential challenges and threats to the security and stability of the DNS, and the extent to which the security efforts are sufficiently robust to meet future challenges and threats to the security, stability and resiliency of the DNS, consistent with ICANN’s Mission.

The SSR Review Team shall also assess the extent to which prior SSR Review recommendations have been implemented and the extent to which implementation of such recommendations has resulted in the intended effect.

The SSR Review shall be conducted no less frequently than every five years, measured from the date the previous SSR Review Team was convened (see Bylaws, Section 4.6(c)).

Timeline of Review

• The first SSR Review concluded in 2012; the second review (SSR2) commenced with a Call for Volunteers in June 2016.
• Further reviews to be conducted no less frequently than every five years, measured from the date the previous SSR Review Team was convened.

One SSR Review has been completed to date, to assess the extent to which "ICANN has successfully implemented its security plan, the effectiveness of the plan to deal with actual and potential challenges and threats, and the extent to which the security plan is sufficiently robust to meet future challenges and threats to the security, stability and resiliency of the Internet DNS, consistent with ICANN's limited technical mission."

SSR2 Review Team produced 63 final recommendations for Board consideration and released its Final Report on 25 January 2021.

On 22 July 2021, the Board took action on each of the 63 recommendations contained in the SSR2 Final Report, as specified within the scorecard titled “Scorecard: Final SSR2 Review Team Recommendations - Board Action 22 July 2021“:

• 13 Recommendations were accepted by the Board, subject to prioritization, risk assessment and mitigation, costing, and implementation considerations; with the understanding that two recommendations are already fully implemented
• 6 Recommendations were rejected by the Board, because the recommendation cannot be approved in full. The Board notes that part of the community intent in incorporating Specific Reviews into the ICANN Bylaws in 2016 was to require the Board to act on recommendations as written, not as interpreted by ICANN org or Board.
• 10 Recommendations were rejected by the Board. The detailed rationale for each recommendation sets out the specific reasons for the Board's decision.
• 34 Recommendations were placed in pending status. The ICANN Board committed to take further action on these recommendations subsequent to the completion of intermediate steps as identified in the Scorecard: Final SSR2 Review Team Recommendations - Board Action 22 July 2021

• • 4 Recommendations the Board determined to be pending, likely to be approved once further information is gathered to enable approval.
  • 6 Recommendations the Board determined to be pending, likely to be rejected unless additional information shows implementation is feasible. Based on the information available to date, the Board anticipates that each of these recommendations will be rejected.
  • 24 Recommendations the Board determined to be pending, holding to seek clarity or further information. The Board is unable to signal at this time whether it is likely to accept or reject these recommendations pending additional information.

On 01 May 2022, the Board took action on 3 pending recommendations. The Board approved one recommendation, and rejected two recommendations, as specified within the "Scorecard: SSR2 Pending Recommendations-Board Action 1 May 2022". 

On 16 November 2022, the Board took action on 21 pending recommendations. The Board approved nine recommendations and rejected twelve recommendations, as specified within the 16 November 2022 Scorecard.

On 10 September 2023, the Board took action on nine pending recommendations. The Board approved one recommendation and rejected eight recommendations, as specified within the 10 September 2023 Scorecard.

Currently, one recommendations remains in pending status. 

See https://www.icann.org/resources/reviews/specific-reviews/ssr for more information. Team Calendarsid80793a63-8f23-4775-b5d1-857d4fe234fb