August 2025 - WG-IDAssurance - mailman.kantarainitiative.org

No Call This Week
by Yehoshua Silberstein 28 Aug '25

28 Aug '25

Reminder, there is no IAWG meeting this week. Yehoshua -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

No IAWG call August 28
by Andrew Hughes 27 Aug '25

27 Aug '25

Hi folks - there is no IAWG call scheduled for this week. andrew. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Re: Upcoming NIST webinar
by Yehoshua Silberstein 19 Aug '25

19 Aug '25

Apparently, the registration link from the above email doesn't work. You should be able to register via the link on this page. On Tue, Aug 19, 2025 at 1:21 PM Yehoshua Silberstein <yehoshua(a)proof.com> wrote: > Good afternoon everyone. Please see the following webinar tomorrow on the new > standards. > > > > > > > View As Web Page > > > > > > > > > > NIST CYBERSECURITY AND PRIVACY PROGRAM > > > > > > > > > > > > ONE WEEK AWAY… JOIN US FOR A DIGITAL IDENTITY GUIDELINES PUBLIC WEBINAR! > > > > > > > > > > August 20, 2025 > > > > > > | 12:00 PM – 1:30 PM EDT > > > > > > > > NIST will host a public webinar to discuss the recently released final > > version of Special Publication 800-63, Digital Identity Guidelines, Revision > > 4, which intends to respond to the changing digital landscape that has > > emerged since the last major revision of this suite was published by NIST in > > 2017. > > > > > > > > > > > > > > > > > > > > > > > > This informative webinar featuring NIST’s identity team will cover > > the content changes recently made to the entire suite of Digital Identity > > Guidelines documents and will explore topics such as technical requirements > > for meeting digital identity assurance levels, requirements for security and > > privacy, and considerations for an improved customer experience relative to > > digital identity solutions and technology. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Those interested are encouraged to join and bring questions. > > > > > > > > > > > > > > > > > > > > > > > > > > REGISTER > > > > NIST Cybersecurity and Privacy Program > > Questions/Comments about this notice: dig-comments(a)nist.gov > > > > > > > > > > > > > > > > > > > > > > CONNECT WITH US > > > > Received this email from a friend? Subscribe here. > > > > Subscriber services: > > > > Manage Preferences | Unsubscribe | Help > > > > -------------------------------------------------------------------------------- > > > > If you have questions or problems with the subscription service, please > > contact subscriberhelp.govdelivery.com. > > Technical questions? Contact inquiries(a)nist.gov. (301) 975-NIST (6478). > > > > This service is provided to you at no charge by National Institute of > > Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, > > MD 20899 · 301-975-6478 > > > > Yehoshua > > > -- > > Yehoshua Silberstein | Senior Counsel, Product Compliance R&D > yehoshua(a)proof.com > > > (857) 577-8144 > > > > > > > > > > > Notarize is now a Proof brand 🎉 We hope you love our new look and feel as > much as we do! -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

Upcoming NIST webinar
by Yehoshua Silberstein 19 Aug '25

19 Aug '25

Good afternoon everyone. Please see the following webinar tomorrow on the new standards. > > View As Web Page > > > > > NIST CYBERSECURITY AND PRIVACY PROGRAM > > > > > > ONE WEEK AWAY… JOIN US FOR A DIGITAL IDENTITY GUIDELINES PUBLIC WEBINAR! > > > > > August 20, 2025 > > > | 12:00 PM – 1:30 PM EDT > > > > NIST will host a public webinar to discuss the recently released final version > of Special Publication 800-63, Digital Identity Guidelines, Revision 4, which > intends to respond to the changing digital landscape that has emerged since > the last major revision of this suite was published by NIST in 2017. > > > > > > > > > > > > This informative webinar featuring NIST’s identity team will cover the content > changes recently made to the entire suite of Digital Identity > Guidelines documents and will explore topics such as technical requirements > for meeting digital identity assurance levels, requirements for security and > privacy, and considerations for an improved customer experience relative to > digital identity solutions and technology. > > > > > > > > > > > > > > Those interested are encouraged to join and bring questions. > > > > > > > > > > > > > REGISTER > > NIST Cybersecurity and Privacy Program > Questions/Comments about this notice: dig-comments(a)nist.gov > > > > > > > > > > > CONNECT WITH US > > Received this email from a friend? Subscribe here. > > Subscriber services: > > Manage Preferences | Unsubscribe | Help > > -------------------------------------------------------------------------------- > > If you have questions or problems with the subscription service, please > contact subscriberhelp.govdelivery.com. > Technical questions? Contact inquiries(a)nist.gov. (301) 975-NIST (6478). > > This service is provided to you at no charge by National Institute of > Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, > MD 20899 · 301-975-6478 Yehoshua -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

New Project Charter
by Yehoshua Silberstein 14 Aug '25

14 Aug '25

Here is the draft charter. -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

Update
by Kay Chopard 14 Aug '25

14 Aug '25

Dear IAWG members: I am currently traveling and will continue to be on travel through next week, so my responses are delayed. I would like to clarify a couple of things, but I won't provide a detailed response to all the emails that have been exchanged. 1. A year ago, I met with all the assessors in one-on-one meetings to discuss the changes we are revisiting this summer. Only a couple of companies were opposed to these changes back then and declined to sign an NDA or engage in contract discussions as we move forward. That offer remains open. 2. There should be very little change for the assurance companies except with whom they contract. They already have contracts with Kantara, and these will be expanded to include the assessment itself and the assessor services. - We will allow companies to choose their assessor and for existing companies to be able to continue to use the same assessor if they would like, assuming their chosen assessor continues to do Kantara assessments. - We will not be reducing prices, so there will be no cost savings in assessor services. - One company has already signed a subcontract with Kantara to do assessment services. Although they have not conducted NIST 800-63 assessments, they have assisted Kantara in providing other services and will be available in the future as needed. - I am already meeting with individual companies to effect this change. 3. Some organizations have criticized me for not having sufficient numbers of assessors. I sense that those who have been vocal on this group appear to be the only Kantara assessors. - On the Kantara website, you will see other assessor options, including large auditing firms. - When I first came to Kantara there were only four companies in the program, we now have over 35 services that are assessed each year and have added four new companies this year alone. - We will continue to bring on more assessors to meet demand as necessary and have engaged in discussions with additional auditing firms. 4. The business operations decisions are more complicated than simply the requirements for ISO 17065. As you can see from the program's growth over the last four years, the Board and I have recognized the need to update our processes to meet the demand and provide better service to the assurance companies. Kantara provides a vital service, and we must improve our processes to ensure we maintain a high-quality program. - The IAWG is not being "defrocked". The public comment periods for the version 4 assessment criteria will still be in place, and IAWG as a group or individuals may provide the feedback. (Public review and comment for the criteria updates are 45 days, as always.) - The IAWG will not be responsible for writing the new version 4 assessment criteria. The assurance program will become the scheme owners, and I will be assigning people to write the 800-63 version 4 assessment criteria, subject to public review and comment. - I am responsible for the business operations, and the decision of who will write the assessment criteria will be part of my business decision-making. - The Board of Directors discussed the change in audit services last year during its budget approval process for 2025. These are reflected in their approved 2025 budget. They will continue to monitor the business processes as required by their fiduciary responsibility. 5. NIST 800-63 version 4 is required to be implemented by federal agencies one year from its release. We will work to have it written, reviewed, and commented on so that it is ready to be assessed by late summer of 2026. I am still working on the project timelines and tasks to get this done as efficiently as possible. - Assurance companies will continue to be assessed and receive a trust mark against version 3 for at least three more years, if they choose. - Kantara previously offered the Classic assessment and trust mark for those companies that needed to maintain an 800-63 version 2 trust mark. That has been retired, with only a couple of legacy companies that still need this version. We will revisit whether we need a similar program for version 3 and will be gathering input in that regard next year. 6. I have already begun to assemble a stakeholder oversight body. It will be a smaller group. Participants must be willing to work on all aspects of the assurance program documentation, processes, policies, and procedures. They must also commit to working collaboratively and in a forward-looking manner. They are required to have expertise in the area of digital identity guidelines. - Some of the stakeholder groups to whom I have made invitations include relying parties for several industry verticals, government agencies, assessors, assurance companies, the ARB, the Board of Directors, and members of the public/consumers. This group will begin meeting in September. - The open items approved by the IAWG and requiring implementation will be assigned to assurance program staff. The oversight group will then oversee the proper implementation of these updates. - The size of the IAWG does not allow it to be responsive and timely as the program has grown. But they will still have the opportunity for review and comment during all public comment periods. 7. I have received many complaints regarding the email traffic on this group email. Please refrain from using this email to espouse personal views or to denigrate the Kantara organization or other individuals. I refer you to the Code of Conduct adopted by the Leadership Council, as that is the governing body for all workgroups. Thank you for your continued support of Kantara and its work. Best regards, Kay *Kay Chopard | **Executive Director* Email: kay(a)kantarainitiative.org <amanda(a)kantarainitiative.org> LinkedIn: @KantaraInitiative <https://www.linkedin.com/company/kantara-initiative/>

1 0

Re: IAWG Meeting This Thursday, August 14th: Discussing Our Future Direction
by Mike Magrath 13 Aug '25

13 Aug '25

Yehoshua, I am aware that Kantara is not permitted to share the full ISO 17065 document however, I don't see any restriction to copying and pasting specific language in 17065 that has driven this course of direction for full transparency with the IAWG. I spent considerable time last week reading and re-reading the standard multiple times and consulted Google, Gemini and ChatGPT looking for clear evidence as to why the IAWG, under its current charter, cannot continue to develop and maintain the service assessment criteria. While 17065 puts the onus on the certification body to have procedures in place to maintain impartiality, that is in place today. Kantara would need to own the scheme which it clearly does today. Under the current structure of the IAWG, I do not think it jeopardizes 17065 accreditation. If it is specified in 17065, I would appreciate it if you of someone on this distribution list will point that out to me. Opening Thursday's meeting with the specific ISO language would be a good way to kick off the discussion and answer a lot of questions. This is an important decision, and the members of the IAWG deserve transparency. Regards, Mike Michael Magrath (he/him) | Director of Identity Policy and Industry Relations | Easy Dynamics Corp<http://www.easydynamics.com/> mmagrath(a)easydynamics.com<mailto:mmagrath@easydynamics.com> | 703-944-1090 From: Yehoshua Silberstein [mailto:yehoshua@proof.com] Sent: Tuesday, 12 August, 2025 19:49 To: IAWG Subject: [WG-IDAssurance] IAWG Meeting This Thursday, August 14th: Discussing Our Future Direction Hi IAWG, This is a reminder for our scheduled meeting this Thursday, August 14th, at the usual time. As you know, the release of NIST SP 800-63 v4 and recent organizational changes have brought the IAWG's original mandate to its natural conclusion. To ensure a clean transition, we have completed our review of all outstanding items and formally handed off all concluded work to Kantara staff for implementation. With our legacy work now complete, the purpose of this meeting is to discuss the formal wind-down of the IAWG and to present a proposal for a new working group to tackle the next set of industry challenges. This new initiative will focus on: * Enabling a trusted marketplace for modular identity components. * Standardizing how a verified identity is bound to critical actions like signatures and consents. We look forward to your participation as we celebrate the IAWG's accomplishments and discuss this vision for the future. Best regards, Yehoshua Silberstein & Andrew Hughes IAWG Co-Chairs IAWG - Weekly Group Call Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09<https://events.trustifi.com/api/o/v1/click/689b9aa78e2595193168445d/fff3a6/…> Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ<https://events.trustifi.com/api/o/v1/click/689b9aa78e2595193168445e/fff3a6/…> Location https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09<https://events.trustifi.com/api/o/v1/click/689b9aa78e2595193168445f/fff3a6/…> View map<https://events.trustifi.com/api/o/v1/click/689b9aa78e25951931684460/fff3a6/…> Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com<mailto:yehoshua@proof.com> (857) 577-8144 [https://outlook.office.com/mail/?nativeVersion=1.2025.801.400] Notarize is now a Proof<https://events.trustifi.com/api/o/v1/click/689b9aa78e25951931684461/fff3a6/…> brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

4 4

Re: IAWG Meeting This Thursday, August 14th: Discussing Our Future Direction
by Yehoshua Silberstein 12 Aug '25

12 Aug '25

Hi all, Apologies for the oversight in my last email. To clarify for any new members or those who haven't joined in a while, the IAWG meeting this Thursday, August 14th, will be at 12:00 PM EDT. Looking forward to the discussion. Best, Yehoshua On Tue, Aug 12, 2025 at 3:48 PM Yehoshua Silberstein <yehoshua(a)proof.com> wrote: > Hi IAWG, > > > This is a reminder for our scheduled meeting this Thursday, August 14th, at > the usual time. > > > As you know, the release of NIST SP 800-63 v4 and recent organizational > changes have brought the IAWG's original mandate to its natural conclusion. To > ensure a clean transition, we have completed our review of all outstanding > items and formally handed off all concluded work to Kantara staff for > implementation. > > With our legacy work now complete, the purpose of this meeting is to discuss > the formal wind-down of the IAWG and to present a proposal for a new working > group to tackle the next set of industry challenges. > > This new initiative will focus on: > > * Enabling a trusted marketplace for modular identity components. > * Standardizing how a verified identity is bound to critical actions like > signatures and consents. > > We look forward to your participation as we celebrate the IAWG's > accomplishments and discuss this vision for the future. > > Best regards, > > > Yehoshua Silberstein & Andrew Hughes IAWG Co-Chairs > > > > IAWG - Weekly Group Call > > Kantara Initiative is inviting you to a scheduled Zoom meeting. > Join Zoom Meeting > https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 > > Meeting ID: 931 6796 5850 > Passcode: 884696 > > --- > > One tap mobile > +16465588656,,93167965850#,,,,*884696# US (New York) > +16469313860,,93167965850#,,,,*884696# US > > --- > > Dial by your location > • +1 646 558 8656 US (New York) > • +1 646 931 3860 US > • +1 301 715 8592 US (Washington DC) > • +1 305 224 1968 US > • +1 309 205 3325 US > • +1 312 626 6799 US (Chicago) > • +1 689 278 1000 US > • +1 719 359 4580 US > • +1 720 707 2699 US (Denver) > • +1 253 205 0468 US > • +1 253 215 8782 US (Tacoma) > • +1 346 248 7799 US (Houston) > • +1 360 209 5623 US > • +1 386 347 5053 US > • +1 507 473 4847 US > • +1 564 217 2000 US > • +1 669 444 9171 US > > Meeting ID: 931 6796 5850 > Passcode: 884696 > > Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ > > > > > LOCATION > > https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 > View map > > > > Yehoshua Silberstein | Senior Counsel, Product Compliance R&D > yehoshua(a)proof.com > > > (857) 577-8144 > > > > > > > > > > > Notarize is now a Proof brand 🎉 We hope you love our new look and feel as > much as we do! -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

IAWG Meeting This Thursday, August 14th: Discussing Our Future Direction
by Yehoshua Silberstein 12 Aug '25

12 Aug '25

Hi IAWG, This is a reminder for our scheduled meeting this Thursday, August 14th, at the usual time. As you know, the release of NIST SP 800-63 v4 and recent organizational changes have brought the IAWG's original mandate to its natural conclusion. To ensure a clean transition, we have completed our review of all outstanding items and formally handed off all concluded work to Kantara staff for implementation. With our legacy work now complete, the purpose of this meeting is to discuss the formal wind-down of the IAWG and to present a proposal for a new working group to tackle the next set of industry challenges. This new initiative will focus on: * Enabling a trusted marketplace for modular identity components. * Standardizing how a verified identity is bound to critical actions like signatures and consents. We look forward to your participation as we celebrate the IAWG's accomplishments and discuss this vision for the future. Best regards, Yehoshua Silberstein & Andrew Hughes IAWG Co-Chairs IAWG - Weekly Group Call Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ LOCATION https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 View map Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

IAWG Updates
by Andrew Hughes 07 Aug '25

07 Aug '25

Hi IAWG, You may have seen that NIST has finally released SP 800-63 v4. This is a significant milestone for Kantara and will initiate a flurry of activity for many of us. The publication of SP 800-63 v4 and UKAS requirements for ISO 17065-accredited programs have resulted in immediate changes to the US Assurance Program, as detailed in the attached memo. Most significantly, the US Assurance Program is assuming authority and responsibility over the service assessment criteria. Yehoshua and I are unavailable to meet on August 7 as we will both be at a conference. The next scheduled IAWG call will be on August 14 at the usual time. With the US Assurance Program now responsible for service assessment criteria, we will be evaluating the future role and work of IAWG. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

3 4