C2PA

Neil expanded on the application of the ToIP risk assessment templates and guides to the C2PA model. Some of the take homes are 

• scope of interest that we should promote for ToIP. For example, do we include risks that go towards the harms considerations? In other words, do we consider the risks that a well intentioned ecosystem fails to deliver on its good intentions, or that a poorly intentioned ecosystem DOES deliver on its intention?
• The existing ToIP template and guide could be expanded (discussion that Neil Thomson want to have with Scott Perry )  

EIC

John gave a brief overview of the European Identity Conference (EIC) held in Berlin last week. Key points mentioned were

• Decentralised Identity was the talk of the show. The catalyst being EIDAS2.
• Verifiable Credentials were everywhere. One key indicator being the commitment that Ping/Forgerock are showing to VCs
• The ToIP panel presentation held on Friday afternoon was well attended despite being near the very end of 4 days of conference.
• Governance got a mention in several talks, perhaps deserves its own stream... 

ToIP Website

John highlighted that the ToIP website now shows the 3rd generation model which users a building description to introduce the "Trust Canvas"