August 7, 2012 Security Working Group Conference Call
Security Working Group Meeting
Attendees
- Kathleen Connor
- Mike Davis Security Cochair
- Suzanne Gonzales-Webb CBCC Cochair
- Rob Horn
- Jim Kretz
- Ted Lesueur
- John Moehrke Security Cochair
- Tony Weida
Back to Security Main Page
Agenda
- (10 min) Roll Call, Approve July 31, 2012 Security Working Group Conference Call Minutes & Accept Agenda
- (20 min) Data Segmentation for Privacy Pilot Demonstration at HL7 Security September WGM - Mike Davis
- (10 min) Security and Privacy Ontology Project Update – Mike Davis
- (10 min) TSC Review of Security Service Oriented Architecture DAM Project Scope Statement & Security WG’s need to update 3-Year Plan- Kathleen Connor
- (10 min) Other Business, Agenda for Next call, Action Items, and Wrap Up
Minutes
- RE: Approval of Minutes and Agenda – Presiding Cochair, Mike Davis asked for approval of the minutes and agenda. John Moved; Rob Seconded. Minutes and agenda approved (0-0-7)
- RE: Data Segmentation for Privacy (DS4P) Pilot Demonstration at HL7 Security September WGM – Mike Davis provided background on the ONC’s interest in demonstrating the DS4P pilot led by VA/SAMHSA in September timeframe. ONC DS4P project has been considering several venues. HL7 September WGM in Baltimore offers an opportunity to engage the HL7 US and international members, federal government representatives, and other stakeholders in DS4P who can travel to Baltimore.
This initial pilot will focus on the DS4P PUSH use cases. Potential extensions on the pilot in future venues such as HIMSS and AMIMA would focus on DS4P PULL and Emergency Access use cases. Mike noted that the HL7 venue is a “win-win” for HL7 because DS4P uses a number of HL7 vocabularies and standards such as the CCDA and the CDA Consent Directive, and provides ONC with a venue in which to engage an important constituency for DS4P Implementation Guide. Mike described the logistics efforts to date: Optimizing opportunities to demonstrate during the WGM also optimized travel costs for the pilot team. So far, he has determined that the Security or CBCC WG rooms can be used but non-registrants would need to be listed so that registration desk can let them in and they would not be permitted to access other conference meetings or refreshments. Mike suggested finding a sponsor for refreshments in the demo space. Possible to get a room for Q5 that would not require monitoring of non-registrants. Security WG room is not available Q3-4 since it’s been reserved for a Security Risk Assessment educational session. Mike asked for other ideas. John suggested setting up demo in the main conference dining area. Mike noted that he’d presented on the main stage during a previous conference meal, so that might be a way to publicize the demo. Another idea is to set up a booth near registration so non-registrants can be monitored. This would also leave the Security/CBCC meeting rooms for other WG activities. Ted suggested printing brochures, and perhaps finding a refreshment sponsor such as McKesson. Other idea is to develop a booth size placard for the demo area. Mike committed to continuing to sort out logistics, and to discuss further during next week’s meeting.
- RE: Security and Privacy Ontology Project Update – Although the Task Order for SME resource (Tony Weida) has been approved, it has not been released yet so Security WG may not have resources to work on the Ontology at September WGM.
- RE: TSC Review of Security Service Oriented Architecture DAM Project Scope Statement & Security WG’s need to update 3-Year Plan: Kathleen presented background on Security WG 3-Year Plan. WG decided to prepare necessary 3YP material for discussion at WGM.
- RE: Other Business, Agenda for Next call, Action Items, and Wrap Up – Call scheduled for 8/14. Agenda includes Demo Logistics and WGM Agenda development.
Meeting adjourned at 2:00 PM Eastern
Action Items
- RE: DS4P pilot demo – Mike to continue working out logistics options for discussion next week.
- RE: Security WG 3-Year Plan – Kathleen to create Security WG 3-Year Plan wiki page with links to relevant documents.
