Number

Document Sample
Number Powered By Docstoc
					                                                                                                                                            Page 1

Title:    Guidelines for the use and management of TTP Services
Date:     7 September 1999
Source:   Canada

Canada supports the progression of the TTP TR to 2ND PDTR

Please accept the following Canadian contribution as input for consideration at the October 1999 SC27 Work Group meeting in Columbia, Maryland.


 Number       Clause/       Page      Para-       Line      Major/                Recommended Technical Changes and Reason
  (T-x)       Figure        No.       graph       No.       Minor           (Exact wording of recommended changes should be given)
   T1           6.4          24         3                   Minor     Suggested text for new paragraph.
                                                                      In cases where a TTP is acting in a capacity of collecting, aggregating and
                                                                      analysing data on behalf of multiple entities, the TTP-Law Enforcement
                                                                      Agency interface is used to provide data to the appropriate agency for the
                                                                      purpose of preventing inappropriate use of networks or systems.




 Number       Clause/      Page      Para-       Line       Major/                 Recommended Editorial Changes and Reason
  (E-x)        Figure      No.       graph       No.        Minor            (Exact wording of recommended changes should be given)
   E1       Introduction    6          1          2         Minor     Change “Business needs to have confidence” to “Business must have
                                                                      confidence”.
                                                                      Stronger emphasis is needed.
    E2      Introduction     6          1         2         Minor     Change “IT will offer” to “IT systems will offer”.
                                                                      Clarify intended meaning.
    E3      Introduction     6          2         5         Major     Change “integrity” to “confidentiality and integrity”.
                                                                      Trust requires both confidentiality and integrity.
    E4      Introduction     6          5         1         Minor     Insert words “to provide” at the end of the sentence, and remove the
                                                                      words from the lettered bullets.
                                                                      To reduce repetition of words.
                                                                                                                                  Page 2

Number     Clause/      Page   Para-    Line     Major/                 Recommended Editorial Changes and Reason
 (E-x)      Figure      No.    graph    No.      Minor           (Exact wording of recommended changes should be given)
  E5     Introduction    6       6       1       Minor    Insert words “to provide” at the end of the sentence, and remove the
                                                          words from the lettered bullets.
                                                          To reduce repetition of words.
  E6          2         7-8                      Minor    Resequence references. Move references 13888-1, 2 and 3 after 13335-4.
  E7          3          8                       Minor    If no definition is available, suggest to use the following for “IT System”:
                                                          An assembly of computer hardware, firmware, telecommunications,
                                                          interconnections with other IT equipment (e.g., networks), and the entire
                                                          collection of software that is executed on that hardware. Included in this
                                                          definition are word processors, microprocessors, personal computers,
                                                          controllers, automated office support systems, and other stand-alone or
                                                          special computer systems.
  E8          3           8      9        1      Minor    Insert a space after the colon for “Attribute Certification Authority:”
  E9         4.1         10      1      Bullet   Minor    Insert “their” before safeguards.
                                          j               Clarify intended meaning.
 E10         4.2         11    Header            Minor    Change to “Interaction Between a TTP and Entities Using its Services”.
                                                          Following sub-clauses refer to entities, not users.
 E11          5          12      1        5      Minor    Insert “in” before “13335-4”.
                                                          To clarify that Annexes A-H belong with 13335-4.
 E12         5.1         12      1        1      Minor    Change “i.e.” to “e.g.”
                                                          Following text is an example.
 E13         5.1         12      1        4      Minor    Remove commas after “ethical” and “legal”.
                                                          Not required.
 E14         5.1         13      1        4      Minor    Change “met a TTP” to “met by a TTP”.
                                                          Word missing.
 E15         5.2         13      2        4      Minor    Insert “subscriber’s” before “fees”.
                                                          Clarify intended meaning.
 E16         5.3         14      1        1      Minor    Change “that service” to “its services”.
                                                          Clarify intended meaning.
 E17         5.3         14      3        2      Minor    Insert a comma after “contract”.
 E18         5.4         14      3        1      Minor    Move paragraph 3 to paragraph 2 as first sentence.
                                                                                                                             Page 3

Number   Clause/   Page   Para-    Line     Major/                 Recommended Editorial Changes and Reason
 (E-x)   Figure    No.    graph    No.      Minor           (Exact wording of recommended changes should be given)
  E19     5.4.1     15     Last     1       Minor    Delete.
  E20    5.4.5.1    17      1      1-2      Minor    Change “how to keep an organisation’s critical functions operating” to
                                                     “these aspects in order to keep its critical business functions operating”.
                                                     To provide additional clarity.
 E21     5.4.5.1    17      1       3       Minor    Delete the example.
                                                     Does not fit with physical and environmental measures.
 E22     5.4.6.1    18      1       1       Minor    Change “entities” to “personnel”.
                                                     Clarify intended meaning.
 E23     5.4.6.3    19      2       1       Minor    Change “z” to “s” in “organization” and “recognized”.
                                                     To conform to spelling throughout the document.
 E24     5.4.6.3    19      2       2       Minor    Change “the services” to “its services”.
 E25     5.4.6.3    19      2       6       Minor    Insert a period after “requirements”.
 E26     5.4.6.3    19      2       6       Minor    Change “Those are regulated” to “Those requirements are regulated”.
                                                     Clarify intended meaning.
 E27     5.4.6.3    19      4       1       Minor    Change “The decision of the management of a TTP to obtain an
                                                     accreditation” to “The decision to obtain a TTP accreditation by
                                                     management of an organisation”.
                                                     Clarify intended meaning.
 E28     5.4.6.3    20      1     Bullet    Minor    Insert “and” at end of bullet.
                                    j
 E29     5.4.7.1    20      1       2       Minor    Delete one of two periods at end of sentence.
 E30     5.4.7.1    20      2       1       Minor    Change “proof” to “prove”.
                                                     Incorrect word used.
 E31     5.4.7.1    20      2        1      Minor    Change “are means to gain” to “are the means to gain”.
 E32     5.4.7.1    20      2     2 and 5            Change “z” to “s” in “realized”.
                                                     To conform to spelling throughout the document.
 E33     5.4.7.1    20      2       3       Minor    Change “and means to examine” to “and the means to examine”.
 E34     5.4.7.1    20      2       4       Minor    Change “(e.g. ISO/IEC 15408); audit” “to (details can be found in
                                                     ISO/IEC 15408). Audit”
 E35     5.4.7.1    20      2     5 and 6   Minor    Change “and means to examine” to “and the means to examine”.
                                                                                                                           Page 4

Number   Clause/    Page   Para-    Line     Major/                 Recommended Editorial Changes and Reason
 (E-x)   Figure     No.    graph     No.     Minor          (Exact wording of recommended changes should be given)
  E36    5.4.7.1     20      2        5      Minor    Change “realized; assessment” to “realized. Assessment”.
  E37    5.4.7.1     20      2        6      Minor    Change “weakness” to “weaknesses”.
  E38                21      1     1 and 2   Minor    Change “i.e. annually” to “e.g annually”.
  E39    5.4.7.1     21      2               Minor    The bullet list is the same the second one in 5.4.6.3.
                                                      May be best to delete and refer to bullet list in 5.4.6.3.
 E40     5.4.7.1     21      2     Bullet    Minor    Delete “etc.”
                                     k
 E41     5.4.7.1     21      4       1       Minor    Change “outside, they should” to “general public or entities using the TTP
                                                      services, the reports should”
                                                      Clarify intended meaning.
 E42     5.4.7.2     21      1     5 and 6   Minor    The example may have to be changed as a result of decisions made to
                                                      ISO/IEC 13335-5.
 E43       10.1      29      1        1      Minor    Insert “(CA)” after “Certification Authority”.
 E44       10.5      31      2     1 and 2   Minor    Change “which, has issued the certificates” to “which had issued the
                                                      certificates”
 E45       11.1      32      3       3       Minor    Add new sentence at end of paragraph.
                                                      The details regarding the collection of these data should be described in
                                                      service level agreements between the participating entities and the TTP.
 E46       11.4      33    Last      1       Minor    Delete the reference.
                                                      It is no longer needed.
 E47      13.2.1     37                      Minor    Adjust size smaller to match other Figures.
         Figure 8
 E48     Annex D     47              1       Minor    Require title for reference AS/NZS 4444.

				
DOCUMENT INFO
Shared By:
Categories:
Stats:
views:3
posted:2/27/2010
language:English
pages:4