Meeting the InCommon Assurance profile criteria using Active Directory

[Ron Thielen <>]

As I said on the call, I am not an AD expert, but I've been neck deep in the issues for many months.  I'll see what the auditors think of my proposed compensating control, aka alternative means proposal, over the next couple of weeks.

Ron

Ann West <> wrote:

No problem Eric. If you feel your strength might be in the development of the AM document, maybe you can volunteer as drafter of it?

Ann

From: Eric Goodman <>
Reply-To: "" <>
Date: Thursday, February 21, 2013 8:52 PM
To: "" <>
Subject: [AD-Assurance] RE: AD and Assurance: Call for Schedules and Draft Charter

Quick note, Ann,

 

I just want to dispel any notion that I signed up as an AD “Expert”. My offer to participate is based on my anticipated ability to (a) understand the technical details that the real experts explain to me and (b) assist in describing the needs and risks implied by those details to the Alternate Means Proposal.

 

I think that still makes me relevant to the group, but caveat emptor!

 

--- Eric

 

From: [] On Behalf Of Ann West
Sent: Thursday, February 21, 2013 10:18 AM
To:
Subject: [AD-Assurance] AD and Assurance: Call for Schedules and Draft Charter

 

Hello All,

 

Many thanks for your interested in getting AD approved for use with the InCommon Assurance Profiles. This is a far reaching effort that will affect more than just those applying for certifications! 

 

Please add your schedule to the Doodle Poll by Monday:

http://doodle.com/erm75zn5dizubcsp

 

Below is a draft charter for discussion on the first call, however feel free to edit in the interim:

 

Charge:

Determine if there are alternative ways to deploy AD to ensure compliance with InCommon Bronze and Silver.

If there are, develop an Alternate Means Proposal for the set of practices identified (which may be some form of the Cookbook) and submit to InCommon for review. If the risks addressed by the profiles cannot be mitigated adequately using AD, develop community and specification recommendations for next steps.

 

Timeframe: Due April 21?

 

Membership: HE AD Experts (See below); Are there others we should invite?

 

X	Email	Domain	Picture	Name	Reception	Sources	Sub date	Last update
[ ]				Ann West	mail	subscribed	19 Feb 2013	19 Feb 2013
[ ]				Brian Arkills	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				David Walker	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Erik Coleman	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Eric Goodman	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Jeff Whitworth	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Joseph Streeter	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Michael Brogan	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				James Oulman	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Ron Thielen	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Warren Curry	mail	subscribed	20 Feb 2013	20 Feb 2013
[ ]				Dean Woodbeck	mail	subscribed	19 Feb 2013	19 Feb 2013

Leadership: ?

 

Resources: Call bridge, email list (done), wiki?

 

Best regards,

Ann

 

 

Ann West

Assistant Director,

Assurance and Community

Internet2/InCommon/Michigan Tech 

 

office: +1.906.487.1726