Re: Tin-man charter

[George Jones <gmj@pobox.com>]

On Sun, 20 Jun 2004, Merike Kaeo wrote:

> I agree that a cross-reference/survey document for security requirements
> specified in other standards bodies is work that can be done in parallel
> with the framework.  I'll offer to help gather information Chris.

Chris has agreed to work on that.   I'm sure he would not refuse help.

>
> George...who is editor of the framework doc?  I'll volunteer to write if
> noone else has yet.

Ross has said he'll work on it.   I've offered to lend such wisdom and
insite as I may have gained in the opsec-draft odyssy.  This is one
that could probably use a lot of careful thought as it will guide
the rest of the work, so 3 people working on it may be appropriate.

We also need people with interest in writing the other drafts (below).
speak up if you're interested.  Eariler ones need work first,
obviously but the  schedule is not quite yet cast in stone.

  Aug 05          Submit In-Band management requirements to IESG (BCP)
  Aug 05          Submit Out-of-Band management requirements to IESG (BCP)
  Aug 05          Submit Packet Filtering requirements to IESG (BCP)
  Aug 05          Submit Event Logging Requirements document to IESG (BCP)

  Nov 05          Submit Configuration and Management Interface Requirements to
  IESG  (BCP)
  Nov 05          Submit AAA requirements document to IESG (BCP)
  Nov 05          Submit Documentation and Assurance requirements document to IESG (BCP)
  Nov 05          Submit Miscellaneous requirements document to IESG (BCP)

  Mar 06          Submit ISP Operational Security Requirements Profile (info)
  Mar 06          Submit Large Enterprise Operational Security Requirements Profile
  Mar 06          Submit OPSEC Deliberation Summary document

The existence of the opsec draft means that one should not have to
start from scratch on these.  Should make the job easier.

Thanks,
---George Jones