Working Group on Updating the SCI framework
Chair: Dave Kelsey – STFC
Vice Chair: Adam Slagell – NCSA & XSEDE
SCI (Security for Collaboration among Infrastructures) is a collaborative activity of information security officers from several large-scale infrastructures, including EGI, PRACE, EUDAT, WLCG, XSEDE and HBP. A version 1 document has been published – “A Trust Framework for Security Collaboration among Infrastructures”.
http://pos.sissa.it/archive/conferences/179/011/ISGC%202013_011.pdf
The SCI group, in its document, defined best practices, trust and policy standards for collaboration with the aim of managing cross-infrastructure operational security risks. Through this work the aim has been to establish a common understanding of the security measures each infrastructure has implemented and to start work on guidelines for interoperation such as the exchange of information during security incident handling.
This working group of WISE will work towards version 2 of the SCI document which is in fact likely to be a major part of version 1 of the WISE Framework document. The detailed mandate and work plan must be developed by the working group itself when it first meets so it is not possible to be very specific at this stage. It is however clear that a wider range of stakeholders needs to be involved, specifically the national research and education networking organisations (NRENs), and that we do need to address any conflicts for new participants that are present in version 1. Work may also include specific recommendations on the assessment of stakeholders against the SCI requirements, and the protection of services in new technical environments such as the virtualised environment found in a Cloud-based infrastructure. We may also wish to see if lessons may be learned from the existing security policies of members.
Much of the work will be performed by teleconference or email discussion. Face to face meetings will be organised when necessary and where possible.
GET INVOLVED
Subscribe to the WG mailing list