Security Communications Challenge Coordination Joint Working Group

Co-chairs: David Groep (Nikhef), Hannah Short (CERN)

Joint Working Group: in In collaboration with SIG-ISM, IGTF, and REFEDS

...

Maintaining trust between different infrastructures and domains depends largely on predictable responses by all parties involved. Many frameworks – e.g. SCI and Sirtfi – and groups such as the coordinated e-Infrastructures, the IGTF, and REFEDS, all promote mechanisms to publish security contact information, and have either explicit or implicit expectations on their remit, responsiveness, and level of confidentiality maintained. However, it is a well-recognised fact that data that is not verified becomes stale: security contact information that is appropriate at time of enrolment in an infrastructure may later bounce, or have different ‘characteristics’.

In order to achieve its goals of fostering trust between infrastructures that span multiple areas of interest (service provider ensembles, identity providers, organisations and institutions, national federation operators and incident response teams), having this effort established as a joint working group between all relevant stakeholders is seen as a key trust element. To underline this goal, the SCCC working group strives to be joint between WISE, SIG-ISM, IGTF, REFEDS, and is open to other pertinent communities.

The SCCC WG will address the following aspects of security communications challenge (CC) coordination:

...

The SCCC-WG should thereafter become a standing interest group in the WISE-community that maintains a timetable of planned CCs (to prevent overlap), provides a lightweight mechanism to request and coordinate CCs, and promotes the sharing of results with qualified peer infrastructures.