Austin 2016: Proceedings - OTTF Forum

The Open Group Trusted Technology Forum (OTTF) Members' Meetings

Monday, July 18

Objectives

The objectives for the Monday sessions were as follows:

For the first half of the day, the Forum was to review and revise the OTTF roadmap for 2016-2017 and the outreach strategy for 2016. The goal was to revisit the major OTTF deliverables and the outreach strategy for each – and refine timelines, assign priorities, actions, and owners as appropriate.

For the second half of the day, the Forum was to discuss the proposal and the edited supporting documents for adding a new tier and reviewing other already-agreed changes to the existing O-TTPS Accreditation Program, including a name change from Accreditation Program to Certification Program.

Summary

(Morning Session)

  • Review of the 2016 – 2017 roadmap, which can be found here.
  • Review of the Project Plan Milestone and Schedule for our major deliverables.
  • Review and refinement of the Outreach Strategy for the major OTTF target areas, which resulted in some revisions and actions for 2016 outreach and harmonization. There was a good deal of discussion on value propositions for the various constituents and on prioritizing the outreach targets.
  • Highlighting some of the major achievements in Outreach this past quarter:
    • Wikipedia article published here – many thanks to Dan Reddy for making this happen. Once in Wikipedia, search for Open Trusted Technology Provider Standard.
    • Radio spot on US Federal Radio on the Open Trusted Technology Provider Standard (aka ISO/IEC 20243) – aired live last week and the recording is posted here. Panelists in the broadcast are:
      Edna Conway, Chief Security Officer, Global Value Chain, Cisco Systems
      Andras Szakal, VP & Chief Technology Officer, US Federal, IBM
      Sally Long, Director of The Open Group Trusted Technology Forum
    • On the ANSI website it is shown that the BSI (British Standards Institute) has adopted ISO/IEC 20243.

(Afternoon Session)

The group reviewed and revised the certification documents that were prepared by our cert-dev team prior to the members' meeting. These documents are required to be submitted for Company Review.

Outcome: Those at the meeting voted unanimously to recommend to the Steering Committee that the documents be submitted to Company Review.

Action: Sally will work with cert-dev to approve the revisions that occurred or were suggested at the member meeting – and then request that the OTTF Steering Committee vote to begin the Company Review process on the three documents listed below:

  • Accreditation/Certification Policy
  • Conformance Requirements
  • Conformance Statement

Tuesday, July 19

Objectives

There were three major objectives for Tuesday as follows:

  1. Revisit the ISO PAS Submission Form for unresolved comments and any additional edits so we can then pass the form to our Standards Director and our ISO Mentor for any edits they may suggest. After that, we will submit the form to The Open Group Governing Board for approval to submit the O-TTPS Assessment Procedures to ISO.
  2. Finish our strategy planning that was started on Monday – see Monday Summary for details.
  3. Attend the Plenary Session where Joanne Woytek, NASA SEWP and Andras Szakal, IBM provided a presentation on supply chain and the O-TTPS.

Summary

The ISO PAS Submission Form was reviewed and revised.

Next Steps

Sally to update the references section, and do a final editing pass, then send to the Standards Director for review, then to our ISO Mentor for his review and feedback.

Wednesday, July 20

Objectives

The objective for Wednesday was to review and revise the Draft Manager’s Guide that the Framework Workstream participants had drafted.

Summary

The draft document was reviewed by the group. The group felt that it was a good start, but there is still a lot of work to be done in removing redundancies and crisping up the risks and benefits sections.

The Forum members had made an explicit decision to postpone any development on the Guide until they agreed to submit the certification documents to Company Review. Since the Forum is at that point now, they have agreed to start-up development of the Guide again with a concerted effort in order to be ready for Company Review of the Guide by the end of September.

The members decided we would take a step back and re-assign sections to individuals, with the idea that they would pick a buddy to review their section prior to submission/revision to the group as a whole.

Issue: We need this completed by the end of September if we are going to make the January deadline for publication. We want to be able to have this coincide with the launch of the revised Certification Program, which is planned for January.

The Open Group Platinum Members
dxc
fujitsu
HCL_Technologies
huawei
ibm
intel
microfocus
philips