Community

Download

community@kantarainitiative.org

March 2013

2 participants
2 discussions

Call for participation: Cloud Identity and Security Best Practices Work Group
by Heather Flanagan 04 Mar '13

04 Mar '13

Kantara Initiative is pleased to announce the formation of the Cloud Identity and Security Best Practices (CloudIDSec WG)**. Find out below how to join this exciting new group! The core purpose of the CloudIDSec WG is to identify the overlap between the field of Cloud Computing and the Kantara federated identity programs, with a view to defining: * *How Cloud Computing can be leveraged to implement Kantara specifications (e.g. Identity Assurance Framework components) – *This will define specifications for 'IDaaS' – Identity as a Service. What configurations of software can Cloud Service Providers implement; How can they be audited to verify compliance, etc., * *How Kantara can help advance Cloud Security best practices - *Define how Kantara Assurance and Interop Programs can be applied to enhance security of Cloud environments, particularly in line with achieving compliance with Government standards and linked to Government Privacy Audit policies. This Work Group will develop technical specifications and recommendations around: * *IDaaS design models - *Technical blueprints for IDaaS based on Kantara Assurance and Interop recommendations, criteria and other related Kantara working group outputs. . * *RFP templates – *Enable government issues to issue tenders for IDaaS approved to their national ID requirements. * *Marketing white paper – *A joint Kantara / CBPN white paper on CloudIDSec best practices. Thanks to Neil McEvoy, founder of the Cloud Best Practices Network, who will act as Interim Chair. For more information on the CloudIDSec WG, please visit the home page: http://kantarainitiative.org/confluence/x/f4XEAw Join the CloudIDSec DG: http://signup.kantarainitiative.org/?selectedGroup=33 Review the Charter: http://kantarainitiative.org/confluence/x/ioXEAw Mailing list archive: http://kantarainitiative.org/pipermail/wg-cloudidsec/ Copyright Policy: *Kantara IPR Option: Patent Copyright RAND <http://kantarainitiative.org/confluence/pages/viewpage.action?pageId=410256…>* We welcome your participation! -- Heather Flanagan Technical Program Coordinator Kantara Initiative Skype: hlflanagan email: heather(a)kantarainitiative.org

1 0

Kantara Workshop @ HIMSS13
by Joni Brennan 01 Mar '13

01 Mar '13

http://kantarainitiative.org/kantara-initiative-to-appear-at-himss13/ Kantara Initiative is proud to support this annual event that helps HIT professionals make the right decisions for their organizations. With initiatives such as E-Prescribing Controlled Substances, Directed Exchange, Meaningful Use Stage 2, and S&I Framework’s esMD, this topic couldn’t be more relevant to many HIMSS attendees. As part of our support for the event Kantara Initiative will host a discussion on-site Tuesday March 5th, 3:30 to 6:30 to focus on: Trust and Assurance Workshop: NIST 800-63 Equivalent, Identity Credentialing, Authentication and Identity Proofing. This discussion will include guest thought leaders from the healthcare space including: *Experian, Equifax, ApeniMED, DirectTrust.org, SecureKey, Surescripts* and others. *Where:* HIMSS - New Orleans Convention Center *Date:* Tuesday, March 5th *Time:* 3:30 - 6:30 *Room:* 252 3:30 - 4:00 - Welcome & Level Setting 4:00 - 5:00 - Each expert shares their thoughts on the 'lay of the land' around eHealth, AuthN, Identity Proofing and Management - Trends (important things being done that are worth knowing for the long haul) - Transparents (important things people keep looking *through* instead of *at*) - Tropes (technology metaphors that have perhaps become dull with overuse) - Transients (shiny new things that are unlikely to stick around) -- yes, you each should go there... - Q&A 5:00 - 6:00 - Aligning the policies - What do you see as the role of government lead requirements, like NIST 800-63 regarding the eHealth Authentication space? - What can healthcare learn (or benefit from) around previous lessons learned in private sector authentication practices? - Regarding Industry Consortia, like Kantara Initiative for example, how does your organization determine where to get involved in shaping industry? - With so many standards, agencies, active and emerging initiatives how do you identify the opportunities and steer through the challenges? - How do interoperability and alignment to baseline standards enable your organization to be a leader in eHealth Authentication? - How does your organization see activities like that of FICAM and possible NSTIC playing a role? - What are the broader implications of these initiatives to NwHIN (Nationwide Health Information Networks)? - Q&A 6:00 - 6:30 - A call to Action & Closing Remarks

1 0