Re: [secdir] EU Cyber Security Strategy.

[Olaf Kolkman <[e-mail]>]

On Jan 28, 2013, at 10:02 PM, Stephen Farrell <[e-mail]> wrote:

> 
> Hi Olaf,
> 
> I think Hannes' answer was right, and there are more security
> related BCPs (e.g. BCP107). Would it help to make a list or
> can you just say there's a bunch of those and here're some
> examples? If the former we can get you a longer list I guess;-)

I am not quite sure what the dynamics in the MSP will be on topics like this and given that the agenda for the Feb 7 meeting is challengingly long I am afraid not much detail will be discussed. Anyhow, the answer from you and Hannes are useful bagage to have in the back pocket.


> And I've a question back to you: might it be useful to have
> some kind of engagement between the IETF security area and
> ENISA and would that be something to bring up in this context?
> 
> If a very light form of that was useful we'd be happy to
> invite some ENISA person(s) to come to a secdir lunch or give
> a talk at a saag session whenever. (Note: I don't mean from
> some known IETFer who's done stuff with ENISA but rather
> someone from ENISA who's not been to an IETF but might
> usefully inhale our fumes;-)



Yes, I think so.

But the MSP is not affiliated with ENISA, Enisa is clearly a different channel. 

That said, with the IETF being in Berlin in summer we have just sufficient time to try and organize something. I think that it is useful to try and engage in conversation if you have a clear goal in mind of what you want to achieve.

For me: Establishing informal contacts and informing about the going ons in the IETF is a reasonable idea.

As for making that go: We have at least one channel into ENISA, but that is at a rather high level that I wouldn't like to use unless there is a solid a plan and some draft agenda (My co-worker knows one of the guys in the management boards).

A brain-fart along the same lines; maybe we could do something 'regional' by inviting members of the MultiStakeHolder platform for a one day tour. With as sole goal to expose them to the IETF and possibly introduce them to some key leadership figures. The impact of such could be a lot of goodwill, although they might also walk away in suprise :-). It would be a way to get a lot of key Standardization people, especially from all countries, exposed to the IETF. Maybe organizing for Berlin is a bit of a challenge (If we were to do it there I think we should gauge interest during the 7 Feb meeting, and I don't think we have a solid idea by then). But London next year? Perhaps linked to an IAB plenary (deadly boring, but probably of relevance).

The last paragraph was me thinking out loud, not thinking things through.


--Olaf





NLnet
Labs
Olaf M. Kolkman

www.NLnetLabs.nl
[e-mail]

Science Park 400, 1098 XH Amsterdam, The Netherlands