August 21, 2018 Security Conference Call

Back to Security Main Page

Attendees

ilto:grahameg@gmail.com Grahame Grieve].

x	Member Name		x	Member Name		x	Member Name		x	Member Name
x	John Moehrke Security Co-chair		x	Kathleen Connor Security Co-chair		.	Alexander Mense Security Co-chair		.	Trish Williams Security Co-chair
x	Christopher Shawn Security Co-chair		x	Suzanne Gonzales-Webb		x	Mike Davis		.	David Staggs
x	Diana Proud-Madruga		.	Francisco Jauregui		x	Joe Lamy		.	.	Rhonna Clark		.	[ma.	Greg Linden
	.	Johnathan Coleman		.	[mailto: Matt Blackman, Sequoia]
.	Mohammed Jafari		x	Jim Kretz		.	Peter Bachman		x	Dave Silver
.	Beth Pumo		.	Bo Dagnall		.	Riki Merrick		.	[mailto: Julie Maas]

Back to Security Main Page

Agenda

1. (2 min) Roll Call, Agenda Approval
2. (5 min) Review and Approval of:
   • August 07, 2018 Security Conference Call
   • August 14, 2018 Security Conference Call
3. (5 min) GDPR whitepaper on FHIR update - Alex, John, Kathleen
4. (5 min) TF4FA Normative Ballot reconciliation (formerly PSAF) - Mike, Chris
   • Meetings: Tuesdays, 11:00 AM Eastern; freeconference.com same as Security call
   • TF4FA Ballot Reconciliation (wiki)
   • Ballot Reconciliation Sheet_v20180724 for review offline
     • Comments 42-51 up for vote (review if necessary) Suzanne to confirm
5. (10 min) PASS Audit document update - Mike
   • http://wiki.hl7.org/index.php?title=PASS_Healthcare_Audit_Services
6. (05 min) TF4FA Trust Framework Volume 3 (placeholder) - Mike, Chris
7. Is Privacy Obsolete - Mike
   • added to WGM agenda
8. (05 min) Security Working Group - upcoming HL7 Working Group Meeting, Baltimore Maryland
   • Additional Agenda items?
   • DRAFT Agenda Link: http://wiki.hl7.org/index.php?title=September_2018_Security_Working_Group_Meeting_-_Baltimore,_Maryland_USA

Back to Security Main Page

Meeting Minutes (DRAFT)

Chair: Chris Shawn

Roll taken, agenda changes: none

Meeting minutes: August 7, 2918 Motion for approval: (Suzanne / Kathleen) Opposed: none; abstentions: none approved 7

August 14, 2018 Motion for approval: (Suzanne / Kathleen) Opposed: none; abstentions: none: approved: 7 If we are going talk to Federal Agencies, we should start the outreach now

'GDPR White Paper on FHIR

• talked about this subject on the FHIR-Securit
  • chat-a-ton tract at the upcoming FHIR Connectathon
• for people at the conenctathon to come in and have a discussion with 'us' regarding GDPR
• additional--Alex is now completed with his holiday and will pick up where he left off with meetings; there was an ask to reinvigorate the text tht has already been written
  • there isn't significant work at the moment that has been completed, but hopefully more by WGM
• is GDPR white paper for here? Internationally?
  • white paper to expressto eexpress capabilies integrated into fhir which have anapplicability relative to GDPR for security and privacy
  • suspect portabilytwill be touched upon, may integrate FHIRi but not much more to say about that now
  • check, check no check the FHIR feature to security and Privacy? (Answer: Yes)
• additional questions/commetns? none brough forward

TF4FA Balot reconciliation Vote: 42-50 ballot comments Motion to accept the dispositions for comments 42-51 (date dispositions completed 8/14) Suzanne/Mike opposed: none; abstain: 1(Joe Lamy); approve: 6

Please review 51-57 for voting next week

PASS AUDIT post ballot document update

• no update

TF4FA Volume 3 Audit - in progress (its more about Provenance than anything else)… Volume 3 - Provenance

• Plan is to discuss during the September meeting, ballot in January
• because of work with both audit and trust fraemwok volumes 1,2 - we hav e a shortage of resources
• hoping we will have more aviaalbe beyond the already presented graphics
• general update at MON Q3/Q4 plus additional discussion during Secuirty-only call during WGM

Privacy Obsolete

• declaring victory and wrapping up
  • Facebook or Amazon or Twitter, the sage of GDPR is playing out
  • at a point where we are not taking more input and write up what we have

Baltimore WGM Agenda

• not all engaged in FHIR Security; Mike would like JohnM to report out on the details/overview of FHIR-Securit and Privacy - time to cover in detail at another Q
  • Monday Q3/Q4 - small segment, high level what is security privacy int he context of FHIR (not deep)
  • since Dave Pyke will not be avialalbe, the Tuesday Q3 will cover a deepter discussion of Security and Privacy FHIR capabilities, wit Q&A, move forward plan in the upcoming 6-months or so; changes since STU3
  • may record (no indicated technical constraints for the Baltimore meeting)
  • John may be able to locate some FHIR Security (background) videos if anyone is interested

Additional Agenda items? none added for WGM or Teleconference

• topics: Kathleen will outreach to Trish, Alex for topics