I have just come from the Internet Governance Forum, where this was an emerging topic.  The focus on device is increasing and there are some specific and also disruptive technologies that will affect this in several significant ways.  I will be with SG17 in Geneva next week where this is also on the radar, then in DC with US Gov.  My sense is that the requirements for assurance are going to get more complicated and KI ought to spend some effort to understand how the target is shifting.    I am happy to discuss some of the details around this but I regret that I am not available next week.  

Perhaps a small discussion on the back of a KI LC meeting would be an idea.