Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Attendees, Recordings & Transcripts 

Day 1 - Monday, 09 October 9:00 - 5:30 PM/PST
16:00 - 00:30 UTC  [time zone converter]   

For Meeting Agendas, please click here


ATTENDEES:

Team:  James Gannon, Denise Michel, Boban Krsic, Norm Ritchie, Zarko Kecic, Noorul Ameen, Eric Osterweil

Remote Participants:  

Guests/Presenters:  Jim Caulfield, Xavier Calvez, Francisco Arias, Christine Willett, Eleeza Agopian, Brian Aitchison

Observers:  George Sadowsky, Rahul Sharma, Larisa Gurnick, Karen Mulberry

ICANN organization:  Steve Conte, Negar Farzinnia, Brenda Brewer, Yvette Guigneaux

Apologies:  Kerry-Ann Barrett


READING LIST / DISCUSSION DOCUMENTS 


RECORDINGS:

 

TRANSCRIPTS:  EN

CHAT TRANSCRIPT: 

  • EN - AM Session 
  • EN - PM Session  

     EN






    Day 2 - Tuesday, 10 October 9:00 - 5:00 PM/PST
    16:00 - 00:00 UTC [time zone converter]  

    For Meeting Agendas, please click here

    ATTENDEES:

     Team:   James Gannon, Denise Michel, Boban Krsic, Norm Ritchie, Zarko Kecic, Noorul Ameen, Eric Osterweil

    Remote Participants:  Kerry-Ann Barrett

    Guests/Presenters:  Darren Kara, Maguy Serad, Amanda Rose, Jennifer Scott, Jim Caulfield, Xavier Calvez

    Observers:        Alejandro Pisantry, Larisa Gurnick, Karen Mulberry

    ICANN organization:  Steve Conte, Negar Farzinnia,Yvette Guigneaux

    Apologies:  Kerry-Ann BarrettNone


    READING LIST / DISCUSSION DOCUMENTS 

    SSR2 COMPLIANCE 10 OCT 2017.pdf

    Draft Report - ICANN SSR Subgroup Meeting in LA

    RECORDINGS:

    TRANSCRIPTS:    EN

    CHAT TRANSCRIPT: 

    • EN - AM Session 
    • EN - PM Session 

    EN

    Meeting Summary

    The ICANN SSR Subgroup had a very productive two-day, fact-finding meeting at ICANN headquarters in Los Angeles. The subgroup met with a number of ICANN staff subject matter experts and discussed a range of issues relating to the completeness and effectiveness of ICANN’s security processes and the effectiveness of the ICANN security framework (including activities connected to the SSR2 Terms of Reference and implementation of SSR1 recommendations). Topics were covered to varying degrees of detail as warranted; some topics were covered sufficiently and some will require follow-on discussions.

    The subgroup reviewed, submitted questions & information requests about, and discussed early observations about:

    • ICANN’s Security Framework and emerging threats
    • ICANN’s Risk Management Framework
    • ICANN’s Business Continuity strategies, objectives, plans and procedures
    • ICANN’s operational planning and controls, and prioritized activity recovery strategy
    • ICANN’s Incident Response Structure
    • ICANN’s root server operations
    • ICANN’s Global Domains Division activities that relate to SSR objectives, including:
      • New gTLD program SSR-related safeguards
      • Emergency Back-End Registry Operator (EBERO), and related processes, and testing
      • Registry Data Escrow (RyDE) program and Data Escrow Agents (DEA)
      • Centralized Zone Data Service (CZDS) compliance, failures, plans
      • Vetting of registrar and registry operators as relates to SSR, and measurement & impact of malicious conduct by contracted parties, databreaches, etc.
      • SLA Monitoring System (SLAM)
      • Abuse reports, including SADAG and DAAR (Statistical Analysis of DNS Abuse & Domain Abuse Activity Reporting)
      • SSR objectives in ICANN’S standard operating procedures (SOP).


    Meeting Details Details

    How Effective Are ICANN’s Internal Security, Stability, and Resiliency (SSR) Processes?  

    Join members of the ‘ICANN SSR’ sub-team of volunteers from the Second Security, Stability, and Resiliency Review Team (SSR2) as they explore this question and others at their upcoming face-to-face meeting. The sub-team meeting will take place on 9 – 10 October in Los Angeles.

     At the meeting, members of the ICANN organization will brief the sub-team and answer questions on topics including:

    • ICANN’s business continuity management system
    • ICANN’s operation processes and services
    • New generic top-level domain delegation and transition processes

     The ICANN SSR sub-team is aiming to present draft findings to the SSR2 at ICANN60 in Abu Dhabi. For more information on the ICANN SSR sub-team, visit the wiki page.

     How Can I Attend?

     Become an Observer

    Community engagement is critical to a successful review. The SSR2 invites anyone interested in its work to join this review as an observer at any time throughout the course of the review. Learn how to become an observer.


    Decisions Reached/Action Items/Links

    Day 1 - DISCUSSION LINKS/PDFs:

    EBERO Announcement - https://www.icann.org/news/announcement-2-2011-09-14-en

    DNS Abuse Webinars - https://newgtlds.icann.org/en/reviews/cct/dns-abuse

    Domain Activity Abuse Reporting - https://www.icann.org/octo-ssr/daar

    Registry Transition Process - https://www.icann.org/resources/pages/transition-processes-2013-04-22-en

    Emergency Back-End Operator Agreement - https://www.icann.org/en/system/files/files/core-ebero-16aug13-en.pdf

    Coordinated Vulnerability Disclosure Reporting - https://www.icann.org/en/system/files/files/vulnerability-disclosure-05aug13-en.pdf




    Day 2 - DISCUSSION LINKS:

    Registrar Compliance Program -  https://www.icann.org/resources/pages/registrar-2012-02-25-en

    DNS Root Name Service Protocol and Deployment Requirements -  https://www.rfc-editor.org/info/rfc5322

    ICANN Compliance Performance Reports - https://features.icann.org/compliance

    ICANN Compliance Performance Metrics - https://features.icann.org/compliance/dashboard/report-list







    Photos

    SSR2 Subgroup - ICANN SSR Review Team - Los Angeles Meeting - Day 1




    Image Added

    SSR2 Subgroup - ICANN SSR Review Team - Los Angeles Meeting - Day 2