Assurance

[Mohammad Rahman <>]

Hi Mary,

Thank you very much for quick response. What kind of evidence require to validate "the person being identity-proofed for Silver is in control of the university email address they supply"?

Best Regards,

Mohammad Rahman

CUIT

On Wed, Jun 24, 2015 at 1:55 PM, Dunker, Mary <> wrote:

As part of Virginia Tech’s Silver identity proofing process, in order to use email as address of record, we require evidence/verification that the person being identity-proofed for Silver is in control of the university email address they supply.

 

Mary

 

 

-----------------------------------------------------------------

Mary Dunker

Director, Secure Enterprise Technology Initiatives

Virginia Tech Information Technology

1700 Pratt Drive

Blacksburg, VA 24060

540-231-9327

--------------------------------------------------------------------

 

From: [mailto:] On Behalf Of Mohammad Rahman
Sent: Wednesday, June 24, 2015 10:02 AM
To: Ann West
Cc: Chris Dowden; R. Andrew Johnston; Paul Caskey;
Subject: [Assurance] Re: Question for address of record for silver assurance

 

Thank you very much Ann to clarify this issue and point us to right group of people who can help us. 

 

Assurance Team,

 

Can you please verify details about "email address does qualify as address of record for some"?  Some include which group of people?

Can email address verification be only process for address of record verification for silver assurance?

For infrastructure requirement is there any documentation? 

 

 

Best Regards,

 

Mohammad Rahman

CUIT

 

 

 

 

 

On Tue, Jun 23, 2015 at 5:10 PM, Ann West <> wrote:

Hi Mohammad,

 

Many thanks for you inquiry on InCommon Silver Assurance. 

 

The best place for getting advice on the interpretation of the Assurance requirements is from the campuses pursuing Assurance or those that have been certified. These folks can be contacted on the email list. 

 

That said, email address does qualify as address of record for some. Given that your auditor will be reviewing your infrastructure, it’s key that you involve that person in the interpretation of the spec. For further information, I suggest you contact the list above. 

 

And yes, you can scope your Silver Assurance to a target audience, a specific authentication infrastructure or both.

 

Best,

Ann

 

 

Ann West | Associate Vice President 

Trust and Identity | Internet2

475 17th St, Ste 1210 | Denver CO 80202 

W: 720.379.9666 | C: 906-370-9775

 

 

From: Mohammad Rahman <>
Date: Wednesday, June 17, 2015 at 1:30 PM
To: Ann West <>, Chris Dowden <>, "R. Andrew Johnston" <>
Subject: Question for address of record for silver assurance

 

Hi Ann,

 

We are from Columbia University Information Technology (CUIT) working for Silver assurance. We have some questions regarding Silver assurance address of record.

 

 

For Silver assurance is there a requirement to use a physical Address of Record? Is it possible to satisfy the Silver assurance requirements by using just an electronic Address of Record?

 

Has "Silver credentials" issued to only employees?  

 

 

 

 

Thanks,

Mohammad Rahman

 

Sr. Application Systems Developer

CU Information Technology

Columbia University