Assurance

["Jones, Mark B" <>]

The way I read the IAP it would depend on how you have your Systems of Record 
(HR/Student System) integrated with your IdMS.

If any actions described in the IAP are performed directly against your 
Systems of Record then I think they would be included and would be subject to 
4.2.2.1.  But I don't think that being the of data alone qualifies a System 
of Record as being part of your IdMS.


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Michael R. Gettes
Sent: Monday, November 12, 2012 4:00 PM
To: 
<>
Subject: [Assurance] A Biz System of Record as part of IdMS

Hi All,

We are seeking some clarity/perspective regarding the role of HR/Student 
Systems with respect to the IAAF/IAP regarding what is covered as part of the 
IdMS.  If someone enters the ID proofing data into a HR system for a new 
employee and the HR system is feeding this data to the IdMS systems to 
generate a new electronic identity (or match to an old one), is the HR system 
considered to be part of the IdMS and therefore must meet appropriate aspects 
of the IAP?  You could also answer this question as an RA entering the data 
into the HR system.  We are curious also about how 4.2.2.1 in IAP 1.2 (RC 
possibly changing in the coming weeks) should be handled with respect to 
these questions.

Many thanks for your perspectives.

/mrg