Re #2, I’m still concerned that we have a misunderstanding as to the final determination of what is ‘component’.  I don’t see that any re-classifying is necessary because I don’t think the definition has been fundamentally changed.  Possibly refined but not redefined.

Something for the meeting of the 13th?
R

 

Richard G. WILSHER
CEO & Founder,  Zygma Inc.
www.Zygma.biz
+1 714 797 9942

 

From: Lynzie Adams [mailto:lynzie@kantarainitiative.org]
Sent: Monday, June 3, 2024 17:48
To: Richard G. WILSHER (@Zygma Inc.)
Cc: IA WG
Subject: Re: [WG-IDAssurance] Re: A VERY non-comprehensive summary of the component thing

 

Hi Jimmy, 

 

Apologies for the delayed response, things were hectic leading up to Identiverse and I never got around to responding to this before I left.

 

In response to the small task force's report from November 2022, here is where everything stands: 

  1. Component vs. Partial: Partial was dropped, and component used consistently on trust marks and TSL since late 2022. Completed. 
  2. Definition of ‘component’: As Jimmy mentioned, approved 2022-11-03. This has not been fully implemented as the current approved services need to be reclassified on the Trust Service List. Lynzie has tried to find assistance in reclassifying services under new definitions but has not been successful. This is the biggest area of concern – as some things are updated while others are not. 
  3. Revision to CO_SAC: has stalled. With the delay in rev.4 this has made no progress – the initial thought was that it would roll out in the next big overhaul to our criteria.
  4. Classes of approval: this was always contingent on #3; therefore, is not effective yet.
  5. Simple guide to 800-63 approvals: on website: https://kantarainitiative.org/simple-guide-to-ki-assessment-services/ Completed.
  6. Trust Mark format/structure: QR codes have not come to fruition; new, updated trust marks that align with #2 are live (see first point above).
  7. Forms of assessment: The ARB was not in full agreement with this and felt that we should offer something in the realm of ‘readiness’. At this point, it is still offered, and we do have two companies approved as RTO. 

 

The most critical issue is completing #2 for consistency. Happy to revisit any other points.

 

Lynzie Adams

Assurance Program Manager