2021-06-17 GSWG Plenary Meeting Notes

Jun 17, 2021 

• @Drummond Reed

• @Kalyan Kulkarni

• @Steven Milstein

• @Steve Magennis

• @sankarshan

• @Victor Syntez

• @Paul Knowles

• @Karl Kneis

• @Carly

• regrets from @Scott Perry (who was able to attend the final 10 mins)

• regrets from @Daniel Bachenheimer the DIACC/TFEC call is in conflict 

Review the status of the proposed list of deliverables 

• Recording

1. Welcome

   1. Linux Foundation antitrust policy

   2. Introduction of new members

   3. Agenda review

2. News — general community updates relevant to the GSWG

   1. Drummond congratulated Mary on her presentation last week to the Hyperledger Global Forum 

      1. Karl would like to invite Mary to make that presentation to the Ecosystem Foundry Working Group

   2. @Thomas Cox shared that @Savita Farooqui is chairing a subgroup under IEEE P2145 on governance frameworks across various areas

      1. Savita extended an invitation to anyone here who would like to participate

      2. Karl would like to invite Savita to make an Ecosystem Foundry Working Group presentation

      3. Paul suggested an invitation to Philippe Page

3. Deliverables proposed by @Scott Perry as Working Group Approved Deliverables

   1. ToIP Risk Assessment Worksheet (RAW) Template – The Worksheet should be voted as an Excel document (See attachment) but can be shown to the WG in Google Sheet format.  https://docs.google.com/spreadsheets/d/1p0wlOAOgf5Ntq07EZ1Gmw0EtjADgbiXK/edit#gid=857415086

   2. ToIP Risk Assessment Companion Guide – all comments and edits have been resolved.  Here is the link: https://docs.google.com/document/d/1SNHqhO8EVWcM-Icqm5_tnADrMwrYrRsy5wQAbL3w1oI/edit#

   3. @sankarshan is a member of the Trust Assurance Task Force who was able to speak to these two deliverables

      1. The first one is a template for describing and assessing risks

      2. The second one is a written guide that explains how to use the worksheet

      3. Together the two of these deliverables enable a governing authority to tackle the problem of risk assessment

      4. He explained that the Worksheet is designed to run in Excel, but is available in Google sheets format

   4. Drummond did the call for consensus. There were no objections.

   5. DECISION: The ToIP Risk Assessment Worksheet (RAW) Template and the ToIP Risk Assessment Companion Guide are approved as Working Group Approved Deliverables.

4. Deliverables in Process as reported by @Scott Perry

   1. ToIP Governance Metamodel Specification – Scott would like us to approve this as a Working Group Approved Deliverable but it depends on the timing of the Companion Guide.

      1. Karl asked about other related industry standards that we could look to for feedback – he mentioned TOGAF (The Open Group Architectural Framework)

      2. as a certification body

         1. Kantara is another possible body to ask for feedback, particularly for enterprise feedback

         2. Scott brought up the need for passing ISO certification requirements, but we need to finalize the metamodel first

      3. Savita mentioned the IEEE P2145 blockchain governance work and the governance framework matrix

      4. Also Paul mentioned https://www.trustregistry.org

   2. ToIP Governance Metamodel Companion Guide (GMCG) – The document has been edited by Victor, Sankarshan and a few others. @Drummond Reed still needs to complete his review. Karen has started her deep scrub and should coordinate with @Drummond Reed on the timing of when she needs to complete her review.  This document should be ready for GSWG approval at the next Plenary in four weeks’ time:  https://docs.google.com/document/d/1oRJicF_FH1RdUoQgpYVl5-d0gJUYBeNfkBZboozj8eg/edit#heading=h.g0ovbls9bf67

   3. ToIP Trust Assurance and Certification (TAC) Controlled Document Template – I have completed a first draft and will be presenting it to the Trust Assurance Task Force on Friday. https://docs.google.com/document/d/1_5cSBGzsWTAQ8UOnMB7sadjWS6UnwKCQEmYjJF5RFwU/edit#.  I was not sure we specified this as a Working Draft so it needs to be entered and approved by the GSWG as a working draft

   4. ToIP Trust Assurance Companion Guide - I am working feverishly to complete a first draft and will be presenting it to the Trust Assurance Task Force on Friday.  Here is the link: https://docs.google.com/document/d/1Vy8KoM7nm8p5gFOYu1YiTBtsXrtagtomN2nTC12eCAM/edit#.  This document repurposes the ToIP Trust Assurance Primer which was approved as a working draft.

5. Report on other deliverables from @Scott Perry

   1. ToIP Trust Assurance Criteria Matrix Template – This has been approved as a working draft but I have not done much except for obtaining the Sovrin Criteria Matrix as a model to sanitize.

   2. ToIP Trust Assurance Criteria Matrix Companion Guide – This has been approved as a working draft but has not been started.  I should have a draft in two weeks.

6. Report on other deliverables

   1. ToIP Governance Architecture TSS — @Drummond Reed

   2. Design Principles for the ToIP Stack — @Drummond Reed & @Victor Syntez

7. Planning for next meeting: July 1 Special Topic call

   1. Proposal: full one-hour review of the ToIP Governance Metamodel and its Companion

8. Review of decisions and action items