WG15 N428
Report on Rapporteur Group for Security
Annapolis, MD
1993 Oct 26



Submitted by Jon Spencer (US Rapporteur)
 

Attendees:

Ron Elliott - Germany
Jon Spencer - US

1.    WG15 Action Items

 
9305-07 EWOS Liaison to WG15
 
The German Security Rapporteur contacted EWOS on this matter, and was informed that EWOS sees no current need for liaison with WG15.
 
9305-13 WG15 Document N144
 
N144 deals with a request from SC18/WG4 regarding printing and security that is currently 2 1/2 years old.  RGSEC is waiting on a response from the US member body to this request before reporting back to WG15.  (See resolution 9305-01.)
 
9305-66 RGSEC to respond to SC27 liaison request
 
It is believed that this is a request for comment on the rough draft evaluation criteria being created by SC27.  The US Security Rapporteur provided the only input for our response, and this was forwarded directly to SC27 in December of 1992.

2.    Status of RGSEC Tasks

Other than forwarding the response from the US member body inb response to 9305-13, all prior tasks have been completed.

3.    Terms of Reference Review

RGSEC has reviewed its terms of reference and has decided that if WG15 decides to assign to RGSEC the tasks suggested by the US member body, then RGSEC will have reason to continue until these tasks are completed.  The tasks suggested by the US are:
 
 
a. Compile a list of standards bodies engaged in developing security related standards.  The scope of organizations to be included is (1) ISO/IEC bodies, (2) other standards organizations recognized by ISO/IEC, (3) organizations with liaison to JTC1 or its subcommittees, and (4) national governments.
b. Compile a list of existing standards relating to security developed by the bodies identified in (a), including a brief description of each standard.
c. Compile a list of standards development efforts related to security ongoing in the bodies identified in (a), including a brief description of the scope of each such effort.
d. Prepare a report indicating the overlap of these identified standards and efforts on all ongoing or proposed WG15 work items.

RGSEC determined that tasks a, b, and c could be completed prior to the next WG15 meeting.  Task D is dependent upon the completion of tasks a, b and c, cannot be started until after the next WG15 meeting, and the time to complete task d cannot be determined until the April 1994 RGSEC meeting.

RGSEC recognizes the importance of the deliverables resulting from these tasks to the work of WG15.  However, RGSEC does not feel that the past level of participation of member bodies in RGSEC is adequate.  If additional support for RGSEC does not materialize prior to the next WG15 meeting, then the current members of RGSEC will not continue to participate in this work.  It should be noted that since the real work of RGSEC occurs between meetings, support from member bodies can be solely in the form of a participant active in electronic correspondence;  attendance at the WG15 meeting is not required.

RGSEC Resolutions

9310-01    Request for Response from US regarding N144
Whereas RGSEC was requested in action item 9305-13 to reply to N144,

Therefore WG!5 RGSEC requests the US Member Body to action the request as defined in WG15 Resolution 150.

9310-02    Tasks to be assigned to RGSEC
Whereas the US member body has requested that RGSEC perform the following tasks:
 
a. Compile a list of standards bodies engaged in developing security related standards.  The scope of organizations to be included is (1) ISO/IEC bodies, (2) other standards organizations recognized by ISO/IEC, (3) organizations with liaison to JTC1 or its subcommittees, and (4) national governments.
b. Compile a list of existing standards relating to security developed by the bodies identified in (a), including a brief description of each standard.
c. Compile a list of standards development efforts related to security ongoing in the bodies identified in (a), including a brief description of the scope of each such effort.
d. Prepare a report indicating the overlap of these identified standards and efforts on all ongoing or proposed WG15 work items.

Therefore, WG15 assigns tasks A, B and c to the RGSEC to be completed by the next WG15 meeting.  The deliverables for these tasks will be a written report containing the requested information.  In addition, RGSEC will also report on an estimated time to complete task d.  Task d will be considered for assignment to RGSEC at the next WG15 meeting.

9310-03    Request for participation in RGSEC
Whereas the RGSEC has requested a call for support from member bodies in RGSEC, and

Whereas the RGSEC has stated that the primary need for participation occurs between WG15 meetings,

Therefore, WG15 requests that member bodies provide individuals to participate in the RGSEC activities between WG15 meetings.  This participation can be limited to active involvement in electronic mail forums, which includes the performance of subtasks and the submission of reports via electronic mail to the RGSEC.  Member bodies are requested to contact the Lead Rapporteur for Security to either report the names of those individuals who will participate, or to report that the member body will provide no support for RGSEC.