EOSC-hub/AARC2/EGI/EUDAT/WLCG Joint Security Policy Workshop

18 Jul 2018, 13:00 → 20 Jul 2018, 13:00 Europe/Zurich

28/S-029 (CERN)

David Kelsey (Science and Technology Facilities Council STFC (GB))

Much of this meeting will involve real work on actual policy documents - correcting existing draft text and/or writing new words.

Remote access will be possible.

All people who will attend in person are asked to register. All will need a CERN access card to enter the site. Please answer "yes" to the question "Do you need a visitor pass?"  if not already in possession of your own CERN ID card. Please register by end of 12th July 2018 at the latest.

eduROAM WiFi will be available.

Interactive minutes

Wednesday 18 July

14:00 → 18:00 Session 1

14:00 Welcome, Introductions & aims of meeting

Initial discussion about priorities and plans

Main output should be:
1. Draft EOSC-hub/WLCG Data Privacy statement
2. Updated draft Data Protection Policy Framework (for GDPR era).
3. Proposed baseline common AUP.
4. Understanding of differences between EGI and EUDAT policy and proposal for workplan for next 12 months

Other issues:
5. Plans for WISE workshop at NSF Cybersecurity summit (August).
6. Security Workshop in ISGC2019 vs IGTF All Hands

Logistics: discussion of agenda and social events

14:30 Policy news from EGI/WLCG

EOSC-hub Draft Deliverable D4.1
Community security policies

EGI security policies

15:00 News from AARC2 policy work

Sirtfi, Snctfi, AUP alignment, Assurance mapping, Policy Development kit

Speaker: Hannah Short (CERN)

20180524 Policy Starter Pack-2.pdf

AARC Policy Development Kit

DavidG's Review Slides

Guidelines for Attribute Authority Service Provider Operations

15:30 Coffee/Tea break

16:00 Work on AUP alignment

Speaker: Ian Neilson (STFC RAL (GB))

2018-07_CERN.pdf

17:00 Comparison of EGI and EUDAT security policies

Speaker: Mr Ralph Niederberger

An_Overview_on_EUDAT_Security_Policy.pdf

17:30 TBD

Thursday 19 July

09:30 → 12:30 Session 2

09:30 Review agenda for today

09:45 Data Protection and Privacy - part 1

General introduction and discussion.
Plans for WLCG and EOSC-hub and AARC2 guidance.
Do these plans align?
Aiming for good drafts by end of July 2018 for discussion up to the WLCG GDB in September 2018.
What do we need by then?
Data Privacy statement(s), Risk Assessment?, Light-weight "Code of Conduct"-like Policy Framework.

10:30 Coffee/Tea break

11:00 Data Protection and Privacy - part 2

Do some work!

EOSC-hub Privacy Policy

GEANT Privacy Notice V1.0.pdf

Latest draft of GEANT Code of Conduct V2

Old Data Protection policy framework

14:00 → 18:00 Session 3

14:00 Back to AUP alignment

15:30 Coffee/Tea break

16:00 Continue AUP alignment

17:30 Policies for SOC

Speaker: David Crooks (Science and Technology Facilities Council STFC (GB))

Policy considerations for WLCG SOC WG

Friday 20 July

09:30 → 12:30 Session 4

09:30 Review agenda for last day

09:45 Review of documents from yesterday

AUP, Data Protection/Privacy, etc.

10:30 Coffee/Tea break

11:00 Plans for the future

What will we work on jointly (EOSC-hub, AARC2, WLCG)?
Plans for next 12 months - and priorities.
What about requirements/recommendations from FIM4R v2?
EGI CSIRT Information Disclosure policy

12:00 Plans for future work and future meetings

12:15 Conclusions, actions, summary.