Team

Ismael Alaoui(tick) , Phil Benchoff(tick) , Susan Brooker-Gross(tick) , Al Cooper(error) , Mary Dunker(tick) , Frank Galligan(error) , Karen Herrington(error) , Kim Homer(tick) , Greg Kroll(tick) , Joyce Landreth(tick) , Randy Marchany(error) , Nate Smith(error)

Kevin Rooney(tick) , Sharon Kurek(error) , Mike Emero(tick)
((tick) present, (error) absent)

Agenda

  1. Conclude discussion of LOA 2 vs. LOA 3
  2. Next steps

Meeting Notes

  1. Conclude discussion of LOA 2 vs. LOA 3
    1. The PMA met on 11/5/2010 and made a final vote in favor of starting with an LOA 2 soft certificate citing self-service issuance and e-mail encryption as predominant factors in this decision.
    2. Mary spoke to Erv about this also and Erv is fine with the decision to start with an LOA 2 cert and added that we should make these certificates as user friendly as possible, and starting with LoA 2 does not preclude issuing a soft PDC at LoA 3 later.
    3. No opposition to this decision was voiced by this project team.
  2. Next steps
    1. Regular team meetings for this team (Policy Development) will end today, however, this team will be needed in the future to vet updates to policy documents before they are presented to the PMA for approval. Most of that work should be able to be completed using this wiki.
    2. The first of our "next steps" is to work on project requirements.
    3. Greg will work with Frank and Ish after the Thanksgiving holiday to determine whether a rough timeline with milestones can be constructed for this project.
    4. According to the Project Management Standard project requirements are a prerequisite to all other planning documentation so a fairly good idea of requirements needs to be completed before other planning can begin.
    5. Policy documents:
      1. Changes to user CPS for GlobalSign
      2. New CA doc's for subordinate CAs
      3. Mary would like to know where Frank is in his review of current CPSs?
      4. There was discussion of maintenance of old and new CPSs. One idea is to maintain separate groups of documents for the old and new CA. Another idea is to maintain a single set of documents that would incorporate the new documentation in the old (original) document that could be used for both CAs. The old CA documents need to be maintained for several years until all the old certificates have been renewed under the new CA.
    6. Need to begin thinking about team members for the Infrastructure/Software Development & Implementation team (next phase of this project).
    7. At the same time think about team members for the Documentation/ Training team (last phase of this project).
    8. It may be useful to come up with a list of people and/or departments that would "jump right in" to get an LOA 2 cert and begin using it right away (early adopters).