[sacm] SACM Architecture Draft

[Adam Montville <[e-mail]>]

Dear SACM,

Happy (belated) Holidays and a Happy New Year to you!

At our recent virtual interim meeting I promised to post a note to the list regarding our architecture draft to do three things:
Request review
Indicate whether we (the authors) believe it's on the right track
Assuming 2 is good, a list of what's left to be done.
So, we're going to start with 2, move on to 3, and then end with 1...

Bill and I both believe that the architecture draft is, indeed, on the right track. Henk, and possibly others (Nancy?), have described this draft as being too solutions-specific. Section 3, "Architectural Overview" is intended to be the place in this draft to describe the abstract ideas in the architecture. Section 3.1 talks a little bit about the roles of the SACM Components, and Section 3.2 provides the known information about an XMPP-based instantiation of the architecture (note Appendix A maps this instantiation back to our SACM requirements, RFC8248). 

Assuming that we are on the right track, then here's what we think yet needs to be done:

Document specific Components, Capabilities, Interfaces, and Workflows
IT Asset Management could probably stand to be fleshed out
Vulnerability Management is reasonable documented in this draft, but may need work
Configuration management probably needs to be fleshed out as well (needs to be tied to SACM Use Cases)
Determine where to document the above (in this draft or in new drafts), which will determine how long this draft takes to complete.
Prague hackathon to continue the trend of discovering an XMPP-based solution
TODOs in the draft
Privacy Considerations
Security Considerations
Flesh out our IANA Considerations
Will likely result in additional draft work


Clearly, there's a lot to be done here, and we really need your specific, actionable feedback on this draft. Feel free to reach out here or to either of us directly.

This draft in GitHub: https://github.com/sacmwg/draft-ietf-sacm-arch <https://github.com/sacmwg/draft-ietf-sacm-arch> 

This draft on the SACM documents page: https://datatracker.ietf.org/doc/draft-ietf-sacm-arch/ <https://datatracker.ietf.org/doc/draft-ietf-sacm-arch/>


Kind regards,

Adam & Bill