Network.certification February 2020

network.certification@internal.sparta.eu

2 participants
5 discussions

[SPARTA - network.certification] Agenda for WP11 slot on Tuesday 25/02 9:00-10:30

by Philippe Massonet

Dear partners, Next Tuesday 25/02 there is a one and a half hour time slot for WP11. It is scheduled from 9:00 to 10:30, although the current agenda indicates 11:00-12:30. Augustin asked to swap time slots with WP10. This is an opportunity to go over the current status of the tasks and work on the roadmap for the second year. Also we should address if and how we interact with the other WP including the research programs. As an agenda I would propose the following where each task leader drives the discussion: 09:00 - 9:15: WP11 overview (CETIC) 09:15 - 09:30: T11.1 (CETIC) 09:30 - 09:45: T11.2 (CEA) 09:45 - 10:00: T11.3 (LEO) 10:00 - 10:15: T11.4 (SAP) 10:15 - 10:30: Discussion and conclusions Best regards, Philippe -- *Philippe Massonet* /Scientific Coordinator/ CETIC Avenue Jean Mermoz, 28 B-6041 Charleroi Mobile: +32 472 56 98 31 e-mail: philippe.massonet(a)cetic.be <mailto:philippe.massonet@cetic.be> https://www.cetic.be/ / /

5 years, 7 months

[SPARTA - network.certification] Fwd: Continuous Audit Metrics Working Group

by Philippe Massonet

Dear partners, I thought you might be interested in this effort by the Cloud Security Alliance in the area of continuous certification. Best regards, Philippe -------- Message transféré -------- Sujet : Continuous Audit Metrics Working Group Date : Fri, 14 Feb 2020 18:15:20 +0200 De : Alain Pannetrat <apannetrat(a)cloudsecurityalliance.org> Dear colleagues, Apologies for sending out a "bulk" email. I thought it was the easiest way for me to reach out to you and share information about an initiative we are launching, which should interest you. CSA is building the very first "Continuous Certification" scheme in the industry. In the context of this effort, the Cloud Security Alliance is launching a new initiative dedicated to the definition of security attributes and metrics associated with the control objectives defined within our Cloud Control Matrix (CCM), the CSA Metrics Working Group. We are now seeking the help of cloud customers, cloud providers, security tool vendors, auditors and all relevant experts in order to define the very first industry-wide catalogue of security attributes and metrics for continuous auditing. To learn more, you can read our whitepaper here: https://docs.google.com/document/d/1hFsmWglIjrbHKJzRCGaOcMAv6trftnMfdZAvasr… As we typically do, we will create a working group, and hold regulars online conference calls in the next few months to collect input from all volunteers with a view of producing a deliverable by the end of the year. We'd be happy if you can join us! Do not hesitate to share this call with your colleagues as well. Best regards, Alain Pannetrat -- <https://cloudsecurityalliance.org/?utm_source=signature&utm_medium=email> Alain Pannetrat Senior Researcher / STARwatch product manager Cloud Security Alliance p: +30 694 257 3232 e: apannetrat(a)cloudsecurityalliance.org <mailto:your-email@cloudsecurityalliance.org> <https://www.linkedin.com/company/cloud-security-alliance/><https://twitter.com/cloudsa><https://www.facebook.com/csacloudfiles/><https://www.youtube.com/channel/UCrcG6ZtsBPz3xkUZU6asVhA> <https://csacongress.org/event/csa-summit-at-rsa-conference-2020/> This e-mail account is used only for work-related purposes; it is not guaranteed that any correspondence sent to this address will be read by the addressee only, as it may be necessary, under certain circumstances, for third parties appointed by the Cloud Security Alliance to access this e-mail account. Please do not send any messages of a personal nature to this address. ------------------------------------------------------------------------ Spam <https://antispam.belnet.be/canit/b.php?c=s&i=0422EfxUJ&m=7d5278b5e0ab&rlm=c…> Not spam <https://antispam.belnet.be/canit/b.php?c=n&i=0422EfxUJ&m=7d5278b5e0ab&rlm=c…> Forget previous vote <https://antispam.belnet.be/canit/b.php?c=f&i=0422EfxUJ&m=7d5278b5e0ab&rlm=c…>

5 years, 7 months

[SPARTA - network.certification] WP11 12/02/20 audio conference minutes

by Philippe Massonet

Dear WP11 partners, The minutes of Wednesday's audio conference are available in https://sparta.technikon.com/03-WPs/WP11-Certification-organization-and-sup…. The draft review presentation with the slides from LEO are here: https://sparta.technikon.com/03-WPs/WP11-Certification-organization-and-sup…. @task leaders: please add files for the slides "status" and "roadmap" asap. A "Standard" folder to share cybersecurity standards has been created here: https://sparta.technikon.com/03-WPs/WP11-Certification-organization-and-sup…. The Common Criteria standards have been added. Best regards, Philippe -- *Philippe Massonet* /Scientific Coordinator/ CETIC Avenue Jean Mermoz, 28 B-6041 Charleroi Mobile: +32 472 56 98 31 e-mail: philippe.massonet(a)cetic.be <mailto:philippe.massonet@cetic.be> https://www.cetic.be/ / /

5 years, 7 months

[SPARTA - network.certification] Fwd: Re: [SPARTA - bodies.executive-board] Slides for the review

by Philippe Massonet

Dear partners, Please find attached the review presentation template. I suggest to review the template during tomorrow's call at 11:00 CET so that task leaders can provide the contents for their activities. For the agenda, I suggest: - review of the review presentation template with respect to WP11 tasks. - access to standards mentionned in D11.1 - CyberCert workshop status Best regards, Philippe -------- Message transféré -------- Sujet : Re: [SPARTA - bodies.executive-board] Slides for the review Date : Tue, 11 Feb 2020 13:36:33 +0000 De : LEMESLE Augustin <augustin.lemesle(a)cea.fr> Pour : bodies.executive-board(a)internal.sparta.eu <bodies.executive-board(a)internal.sparta.eu> Dear WP leaders, Please find attached the new template for the review. Only minor modification were made, I removed KPIs and added the missing Roadmap slides. It can be found on the SVN and also on Stackfield. I hope we can have some preliminary slides by 14th February and final version by 21th. Best regards, Augustin. -----Message d'origine----- De : bodies.executive-board <bodies.executive-board-bounces(a)server.sparta.eu> De la part de LEMESLE Augustin Envoyé : mercredi 5 février 2020 09:34 À : bodies.executive-board(a)internal.sparta.eu Objet : [PROVENANCE INTERNET] Re: [SPARTA - bodies.executive-board] Slides for the review Dear all, To answer some of your concerns and for clarification, we thought of the 1 person per organisation as the PO told us the room would be a 40 person room. Since indeed it might limit interactions and Q&A, we will try to see with the PO for bigger premises or some alternative solution as Michael or Hervé mentioned. For that, we would need a list of all people attending the review, I would suggest to try and compile it at WP level, and we would discuss with the PO with this list. On achievements slides, I did not want to fill the template with empty achievement slides but I expect more than one slide for achievement. What I was thinking of was a quick look at project management on which they will already have other material but still seems good to mention and more lengthy focus on achievements (indeed with one slide it was not obvious). I am open to suggestion on this and on the content we could put in "Achievements" slides. What would you see in this? On other points: - @Michael: on the agenda, first session WP1 and WP2 (+ WP14) may be joint and we need to discuss this but other session will stay per WP only. - @Jan: I'd say just not to focus on the summary orally - My bad for the Roadmap slide will be added in the final version, I'm open to suggestion on possible content also. - Demonstration is indeed only for programs. Best regards, Augustin. -----Message d'origine----- De : Herve Debar <herve.debar(a)telecom-sudparis.eu> Envoyé : mardi 4 février 2020 14:49 À : LEMESLE Augustin <augustin.lemesle(a)cea.fr> Cc : bodies.executive-board(a)internal.sparta.eu Objet : Re: [SPARTA - bodies.executive-board] Slides for the review Dear Augustin, I agree with many of Michael's points. The slides seem very mechanical. On one hand, they do not easily reflect the actual scientific production for a program. On the other hand, they seem to provide a rather abstract projection of the governance activity, which is more "project management", but not really governance per se. I also share the worry about content. I am wondering about attendance of at least task leaders for CAPE. It seems to me that the best would be to limit the number of people *in the room* per period, e.g. for CAPE have only the 13 partners participating in the review, and the others wait in an adjacent room. It will create some in/out confusion in the room, but might allow for more interaction with the reviewers if needed. At the same time I can understand doubts about the actual feasibility of my proposal. Best regards, Hervé Le 04/02/2020 à 13:39, Friedewald, Michael a écrit : > Dear Agustin, > > according to the last agenda that was discussed there will be joint presentations of more than one WP (WP 1, 2, 14 / WP 8, 9 / WP 10, 11, 12). Your slides do not seem to fit for that purpose. > > Apart from that the presentation seem to be quite formalistic: Lots of > slides on KPI, submitted deliverables, formal risks, etc. – but only > one slide on “Achievements”. Could you please elaborate how many > slides you expect in total and where the focus should be. In my > experience reviewers are more interested in content … > > Could you also elaborate a little bit about the limitation of participants in the review meeting. I do understand that space is limited for such a big consortium like SPARTA. > However, if we are going to discuss CONTENT with the reviewers it might be necessary to have at least some people available. For instance: Since I am not a legal scholar I can maybe give an overview of the results but when it comes to Q&A I would be rather soon at my limits and would probably give the word to the experts. Otherwise the impression that we give might be a bit strange. Having them stand-by outside the room and asking them inside for the relevant work packages might not be very convenient but a possibility. > > Best > Michael > > --- > Dr. Michael Friedewald > > Coordinator ICT Research > Competence Center Emerging Technologies Fraunhofer-Institut für > System- und Innovationsforschung ISI Breslauer Straße 48 | 76139 > Karlsruhe > fon: +49 721 6809-146 (-189, ass.) | fax: +49 721 6809-77-146 > mailto: > michael.friedewald(a)isi.fraunhofer.de<mailto:michael.friedewald@isi.fra > unhofer.de> > https://www.isi.fraunhofer.de > https://www.forum-privatheit.de > https://www.dsfa.eu > https://works.bepress.com/michael_friedewald/ > > > Neue Veröffentlichungen: > > Ochs, C.; Friedewald, M.; Hess, T.; Lamla, J. (Hrsg.): Die Zukunft der > Datenökonomie. Digitales Leben zwischen Geschäftsmodell, Kollektivgut > und Verbraucherschutz. Wiesbaden: Springer VS. 2019 (Medienkulturen > im digitalen Zeitalter). > https://www.springer.com/gp/book/9783658275105 > > Friedewald, M. (Hrsg.): Privatheit und selbstbestimmtes Leben in der > Digitalen Welt: Interdisziplinäre Perspektiven auf aktuelle > Herausforderungen des Datenschutzes. Wiesbaden: Springer Vieweg. 2018 > https://www.springer.com/de/book/9783658213831 > > M. Friedewald et al. (eds.): Privacy, Security and Surveillance: > Citizens’ Perspectives. London/New York: Routledge. 2017 (Open Access) > https://www.routledge.com/Surveillance-Privacy-and-Security-Citizens-P > erspectives/Friedewald-Burgess-Cas-Bellanova-Peissl/p/book/97811386492 > 48 > > Am 03.02.20, 16:06 schrieb "bodies.executive-board im Auftrag von LEMESLE Augustin" <bodies.executive-board-bounces(a)server.sparta.eu<mailto:bodies.executive-board-bounces@server.sparta.eu> im Auftrag von augustin.lemesle(a)cea.fr<mailto:augustin.lemesle@cea.fr>>: > > Dear WP leaders, > > For the review, on 28th you can find attached a proposition for templates for the WP presentation. As a quick timeline before the review: > > · Feedback w.r.t. proposed templates until 7/02 > > · Preliminary version of the slides sent to coordination until 14/02 > > · Final slide version until 21/02 > > For reminder, we expect 1 person per organisation maximum at the review. > > Best regards, > Augustin. > -- Hervé Debar <mailto:herve.debar@telecom-sudparis.eu> Télécom SudParis http://www-public.it-sudparis.eu/~debar_he/ Département Réseaux et Services de Télécommunications (RST) Tel: +33 (0)1 60 76 45 83 GSM: +33 (0)6 71 92 52 52 PGP: 539B427D Fax: +33 (0)1 60 76 42 91 -- bodies.executive-board mailing list bodies.executive-board(a)server.sparta.eu http://server.sparta.eu/cgi-bin/mailman/listinfo/bodies.executive-board -- BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach Belnet Antispam Pro if this mail (ID 0421pACOO) is spam: Spam: https://antispam.belnet.be/canit/b.php?c=s&i=0421pACOO&m=32f0ecbd84ab&rlm=c… Not spam: https://antispam.belnet.be/canit/b.php?c=n&i=0421pACOO&m=32f0ecbd84ab&rlm=c… Forget vote: https://antispam.belnet.be/canit/b.php?c=f&i=0421pACOO&m=32f0ecbd84ab&rlm=c… ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS

5 years, 8 months

[SPARTA - network.certification] Presence of WP11 participants at the review

by Philippe Massonet

Dear WP11 partners, As you know the SPARTA review will take place on Friday 28/02. The current meeting room for the review has 40 places maximum. This is why CEA is suggesting to limit representation at 1 person per partner. CEA has asked WP leaders to compile a list of participants for each WP: "I would suggest to try and compile it at WP level, and we would discuss with the PO with this list". Could you indicate you presence at the review at https://cryptpad.fr/poll/#/2/poll/edit/t4Q1FpWa2rnjCOfr3FMy8N7A/ ? Thank you, Philippe -------- Message transféré -------- Sujet : Re: [SPARTA - bodies.executive-board] Slides for the review Date : Wed, 5 Feb 2020 08:34:20 +0000 De : LEMESLE Augustin <augustin.lemesle(a)cea.fr> Pour : bodies.executive-board(a)internal.sparta.eu <bodies.executive-board(a)internal.sparta.eu> Dear all, To answer some of your concerns and for clarification, we thought of the 1 person per organisation as the PO told us the room would be a 40 person room. Since indeed it might limit interactions and Q&A, we will try to see with the PO for bigger premises or some alternative solution as Michael or Hervé mentioned. For that, we would need a list of all people attending the review, I would suggest to try and compile it at WP level, and we would discuss with the PO with this list. On achievements slides, I did not want to fill the template with empty achievement slides but I expect more than one slide for achievement. What I was thinking of was a quick look at project management on which they will already have other material but still seems good to mention and more lengthy focus on achievements (indeed with one slide it was not obvious). I am open to suggestion on this and on the content we could put in "Achievements" slides. What would you see in this? On other points: - @Michael: on the agenda, first session WP1 and WP2 (+ WP14) may be joint and we need to discuss this but other session will stay per WP only. - @Jan: I'd say just not to focus on the summary orally - My bad for the Roadmap slide will be added in the final version, I'm open to suggestion on possible content also. - Demonstration is indeed only for programs. Best regards, Augustin. -----Message d'origine----- De : Herve Debar <herve.debar(a)telecom-sudparis.eu> Envoyé : mardi 4 février 2020 14:49 À : LEMESLE Augustin <augustin.lemesle(a)cea.fr> Cc : bodies.executive-board(a)internal.sparta.eu Objet : Re: [SPARTA - bodies.executive-board] Slides for the review Dear Augustin, I agree with many of Michael's points. The slides seem very mechanical. On one hand, they do not easily reflect the actual scientific production for a program. On the other hand, they seem to provide a rather abstract projection of the governance activity, which is more "project management", but not really governance per se. I also share the worry about content. I am wondering about attendance of at least task leaders for CAPE. It seems to me that the best would be to limit the number of people *in the room* per period, e.g. for CAPE have only the 13 partners participating in the review, and the others wait in an adjacent room. It will create some in/out confusion in the room, but might allow for more interaction with the reviewers if needed. At the same time I can understand doubts about the actual feasibility of my proposal. Best regards, Hervé Le 04/02/2020 à 13:39, Friedewald, Michael a écrit : > Dear Agustin, > > according to the last agenda that was discussed there will be joint presentations of more than one WP (WP 1, 2, 14 / WP 8, 9 / WP 10, 11, 12). Your slides do not seem to fit for that purpose. > > Apart from that the presentation seem to be quite formalistic: Lots of > slides on KPI, submitted deliverables, formal risks, etc. – but only > one slide on “Achievements”. Could you please elaborate how many > slides you expect in total and where the focus should be. In my > experience reviewers are more interested in content … > > Could you also elaborate a little bit about the limitation of participants in the review meeting. I do understand that space is limited for such a big consortium like SPARTA. > However, if we are going to discuss CONTENT with the reviewers it might be necessary to have at least some people available. For instance: Since I am not a legal scholar I can maybe give an overview of the results but when it comes to Q&A I would be rather soon at my limits and would probably give the word to the experts. Otherwise the impression that we give might be a bit strange. Having them stand-by outside the room and asking them inside for the relevant work packages might not be very convenient but a possibility. > > Best > Michael > > --- > Dr. Michael Friedewald > > Coordinator ICT Research > Competence Center Emerging Technologies Fraunhofer-Institut für > System- und Innovationsforschung ISI Breslauer Straße 48 | 76139 > Karlsruhe > fon: +49 721 6809-146 (-189, ass.) | fax: +49 721 6809-77-146 > mailto: > michael.friedewald(a)isi.fraunhofer.de<mailto:michael.friedewald@isi.fra > unhofer.de> > https://www.isi.fraunhofer.de > https://www.forum-privatheit.de > https://www.dsfa.eu > https://works.bepress.com/michael_friedewald/ > > > Neue Veröffentlichungen: > > Ochs, C.; Friedewald, M.; Hess, T.; Lamla, J. (Hrsg.): Die Zukunft der > Datenökonomie. Digitales Leben zwischen Geschäftsmodell, Kollektivgut > und Verbraucherschutz. Wiesbaden: Springer VS. 2019 (Medienkulturen > im digitalen Zeitalter). > https://www.springer.com/gp/book/9783658275105 > > Friedewald, M. (Hrsg.): Privatheit und selbstbestimmtes Leben in der > Digitalen Welt: Interdisziplinäre Perspektiven auf aktuelle > Herausforderungen des Datenschutzes. Wiesbaden: Springer Vieweg. 2018 > https://www.springer.com/de/book/9783658213831 > > M. Friedewald et al. (eds.): Privacy, Security and Surveillance: > Citizens’ Perspectives. London/New York: Routledge. 2017 (Open Access) > https://www.routledge.com/Surveillance-Privacy-and-Security-Citizens-P > erspectives/Friedewald-Burgess-Cas-Bellanova-Peissl/p/book/97811386492 > 48 > > Am 03.02.20, 16:06 schrieb "bodies.executive-board im Auftrag von LEMESLE Augustin" <bodies.executive-board-bounces(a)server.sparta.eu<mailto:bodies.executive-board-bounces@server.sparta.eu> im Auftrag von augustin.lemesle(a)cea.fr<mailto:augustin.lemesle@cea.fr>>: > > Dear WP leaders, > > For the review, on 28th you can find attached a proposition for templates for the WP presentation. As a quick timeline before the review: > > · Feedback w.r.t. proposed templates until 7/02 > > · Preliminary version of the slides sent to coordination until 14/02 > > · Final slide version until 21/02 > > For reminder, we expect 1 person per organisation maximum at the review. > > Best regards, > Augustin. > -- Hervé Debar <mailto:herve.debar@telecom-sudparis.eu> Télécom SudParis http://www-public.it-sudparis.eu/~debar_he/ Département Réseaux et Services de Télécommunications (RST) Tel: +33 (0)1 60 76 45 83 GSM: +33 (0)6 71 92 52 52 PGP: 539B427D Fax: +33 (0)1 60 76 42 91 -- bodies.executive-board mailing list bodies.executive-board(a)server.sparta.eu http://server.sparta.eu/cgi-bin/mailman/listinfo/bodies.executive-board -- BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach Belnet Antispam Pro if this mail (ID 041WUynKD) is spam: Spam: https://antispam.belnet.be/canit/b.php?c=s&i=041WUynKD&m=6b7ff82141f4&rlm=c… Not spam: https://antispam.belnet.be/canit/b.php?c=n&i=041WUynKD&m=6b7ff82141f4&rlm=c… Forget vote: https://antispam.belnet.be/canit/b.php?c=f&i=041WUynKD&m=6b7ff82141f4&rlm=c… ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS

5 years, 8 months

2025

2024

2023

2022

2021

2020

2019

Network.certification February 2020