The Open Group Trusted Technology Provider Forum (OTTF)

Objective of Meeting

The two major objectives of the Tuesday sessions were to:

• Continue reviewing, revising, and building consensus for the various accreditation elements that will be part of the O-TTPS Accreditation Program, including: Accreditation Requirements, the Conformance Statement Questionnaire, the Evidence of Conformance, the Assessment Procedures, and Third-Party Assessor Criteria
• Define an internal pilot program to provide feedback on the process and on the clarity of the instructional documentation

Summary

The two main activities are summarized below:

• Reviewing the supporting accreditation documentation, including revisions to the Policy for: O-TTPS Recognized Assessor Criteria, Re-Accreditation Requirements, and the process to be used by the Organization in declaring their scope of accreditation.
• Defining a pilot accreditation program to be utilized as a way of working with the OTTF members to evaluate the processes and assessment documents for clarity and usability and for providers to begin informing their organizations should they be planning to apply for accreditation once the program is launched. This will be used as feedback in the definition and implementation of the public program. The objective is to launch the program, to be available to all integrators, providers, and component suppliers in Q4 2013.

OTTF Update

The O-TTPS is an open standard containing organizational guidelines, requirements, and recommendations for integrators, providers, and component suppliers to enhance the security of the global supply chain and the integrity of Commercial Off-The-Shelf (COTS) Information and Communication Technology (ICT) products. This standard, if properly adhered to, will help assure against tainted and counterfeit products throughout the COTS ICT product lifecycle encompassing the following phases: design, sourcing, build, fulfillment, distribution, sustainment, and disposal.

The OTTF has made significant progress on the Open Trusted Technology Provider Standard – Mitigating Tainted and Counterfeit Products (O-TTPS) and on the O-TTPS Accreditation Program.

The O-TTPS (Standard) V1.0 is scheduled to be approved and published in early April 2013. The O-TTPS Accreditation Program (Policy and Accreditation Requirements) are scheduled to be submitted to The Open Group Company Review for approval in Q2 2013. The objective is to have a public launch of the Program in Q4 2013.

If you are interested in participating in the OTTF, please contact Mike Hickey m.hickey@opengroup.org or Chris Parnell at: c.parnell@opengroup.org.

Outputs

The following outputs are available to OTTF members only and can be found on the OTTF collaborative development web-site:

• The suggested changes to the O-TTPS Accreditation Policy and supporting accreditation documents were captured as revisions to the text or as comments for those suggested changes within the documents.
• There is a draft plan for implementing the O-TTPS internal accreditation pilot program and for capturing feedback prior to submitting the Accreditation Policy and Accreditation Requirements to Company Review.

Next Steps

The O-TTPS Framework Work Stream will review and finalize the Policy and supporting accreditation documents. The Forum will further define the pilot program and begin implementing it over the next three months. Company Review of the Accreditation Program is planned for Q2 2013.

Links

• For those of you who are unfamiliar with the OTTF and would like to learn more, the OTTF Information Sheet is a two-page document that provides an overview of the OTTF objectives and deliverables.
• The Snapshot Version of the O-TTPS Standard, which will be replaced by the 1.0 version, once the Company Review Process for 1.0 has been completed (estimated April, 2013).