Re: [secdir] EU Cyber Security Strategy.

The challenge with CyberSecurity (or Internet Security as I call it) is the unclear scope. Depending on your scope pretty much every security specification in the IETF is relevant. 
Of course there are other factors that matter for security that are outside the scope of the IETF. For example, the best security protocol will not help when the software implementation is buggy. 

As an example, you could call RFC 3552 a document that provides "security-by-design guidelines". You could also call the documents from the Messaging Abuse Reporting Format (marf) working group "standards related to information exchange". 

Ciao
Hannes

On Jan 28, 2013, at 2:42 PM, Olaf Kolkman wrote:

> 
> Folk,
> 
> This mail is FYI, it may be of business/personal interest to some of you. 
> I have a specific question.
> 
> Context: MSP for ICT St.
> 
> You may or may not be aware that the EU has a Multi Stakeholder Platform for ICT standardization. One of the stakeholders at the table is the IETF/IAB and your truly is, with Hannes Tschofenig as backup, the representative for the IETF/IAB.
> 
> The platform is chartered to give the Commission advise on all matters standard and to identify standards, developed by fora and consortia, that can be used in public procurement (formally RFCs can not be reference in EU procurement: when these folk talk about standards they think ISO, ITU, ETSI etc etc.)
> 
> 
> Specific: EU Cyber Sec Strat.
> 
> What is attached is part on the advise on all matters standard aspect. The document gives a short executive level overview of what the EU intends with its cyber security strategy. The document is FYI mainly.
> 
> However I have one particular bit of information that I need. See the section on "Where do standards come in". I do not think there is any relevant IETF work in this area (info exchange and such) and would like to get guidance if that is a misunderstanding.
> 
> 
> The platform is having its 3rd meeting 7 Feb.
> 
> 
> <04420Brief20on20Cybersecurity20Strategy20and.pdf>
> 
> 
> NLnet
> Labs
> Olaf M. Kolkman
> 
> www.NLnetLabs.nl
> olaf@NLnetLabs.nl
> 
> Science Park 400, 1098 XH Amsterdam, The Netherlands
> 
> 
> 
> _______________________________________________
> secdir mailing list
> secdir@ietf.org
> https://www.ietf.org/mailman/listinfo/secdir
> wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview