This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "November 10, 2015 Security Conference Call"

From HL7Wiki
Jump to navigation Jump to search
 
(One intermediate revision by the same user not shown)
Line 79: Line 79:
 
==Meeting Minutes (DRAFT)==
 
==Meeting Minutes (DRAFT)==
  
Meeting MInutes approval
+
'''Meeting Minutes approval'''
  
 +
The minutes from the November 3, 2015 meeting were unanimously approved.
 +
 +
'''SOA Planning Guide'''
  
'''SOA Planning Guide'';
 
 
New SOA project, PSS submitted
 
New SOA project, PSS submitted
 
* Main deliverable is a white paper
 
* Main deliverable is a white paper
** an information document as to how HL7 standards should be applied as organizations migrate their information to the Cloud
+
** an informative document as to how HL7 standards should be applied as organizations migrate their information to the Cloud
 
** information can be found in the PSS
 
** information can be found in the PSS
** there is a security section, addressing security and privacy consideration associated with cloud (blueprints)
+
** there is a security section, addressing security and privacy considerations associated with cloud (blueprints)
* Does security want to be involved? as co-sponsor, interested party or do we care?
+
* Does Security want to be involved? A co-sponsor, interested party or do we care?
** Cloud security depends on the clouds service provider  
+
** Cloud security depends on the cloud service provider  
 
** this is an item being worked on by NIST
 
** this is an item being worked on by NIST
** Mike believes that this is immature and will most likely be a part of the infrastructure. Does not see that we have a huge role here
+
** Mike believes that this is immature and will most likely be a part of the infrastructure. Does not see that we have a huge role here.
  
 
* Are there any objections for us being listed as an interested party?
 
* Are there any objections for us being listed as an interested party?
Line 97: Line 99:
  
 
'''SP Privacy Engineering Framework participation as SMEs'''
 
'''SP Privacy Engineering Framework participation as SMEs'''
* A work item proposal out of SC27
+
 
 +
* A work item proposal out of ISO/SC 27 (ANSI INCITS)
 
* Mike will give document to Suzanne for posting
 
* Mike will give document to Suzanne for posting
  
 
'''FHIR Security'''
 
'''FHIR Security'''
Meeting later this afternoon, please join
+
 
 +
Meeting later this afternoon. Please join.
  
 
'''Joint Vocabulary Alignment Update'''
 
'''Joint Vocabulary Alignment Update'''
see CBCC update
+
 
 +
See CBCC update.
  
 
'''PASS Access Control Ballot Reconciliation'''
 
'''PASS Access Control Ballot Reconciliation'''
Row 53-91
 
Motion made to accept the comment dispositions (Rows 53-91; ''comment #50-88'') as presented (Mike/Suzanne)
 
  
Objections: none, Abstentions: none, in favor: 9
+
* Rows 53-91
 +
* Motion made to accept the comment dispositions (Rows 53-91; ''comment #50-88'') as presented (Mike/Suzanne)
 +
 
 +
'''Objections: none, Abstentions: none, in favor: 9'''
 +
 
 +
Ballot Reconciliation (cont.)
  
Ballot Reconciliation (cont)
 
 
starting with Row 91 (comments 89-99)
 
starting with Row 91 (comments 89-99)
Objections: none, Abstentions: none, in favor: 9
 
  
Meeting adjourned at 1357 AZT
+
'''Objections: none, Abstentions: none, in favor: 9'''
 +
 
 +
''Meeting adjourned at 1257 PDT''

Latest revision as of 18:56, 17 November 2015

Attendees

x Member Name x Member Name x Member Name
x Mike DavisSecurity Co-chair Duane DeCouteau . Chris Clark
x John MoehrkeSecurity Co-chair Johnathan Coleman . Aaron Seib
x Alexander Mense Security Co-chair . Ken Salyards Christopher D Brown TX
. Trish WilliamsSecurity Co-chair . Gary Dickinson x Dave Silver
Kathleen Connor . Ioana Singureanu Mohammed Jafari
x Suzanne Gonzales-Webb Rob Horn . Galen Mulrooney
x Diana Proud-Madruga Ken Rubin William Kinsley
x Rick Grow Paul Knapp . Debbie Bucci
x Glen Marshall, SRS Bill Kleinebecker Chris Shawn
Oliver Lawless Rob Horn Serafina Versaggi
Beth Pumo Russell McDonell Paul Petronelli , Mobile Health
x Christopher Doss x Christopher Shawn [mailto: ]

Back to Security Main Page

Agenda DRAFT

  1. ( 5 min) Roll Call, Agenda Approval
  2. ( 5 min) Approve November 03 Meeting Minutes
  3. (15 min) mHealth WG - FHIRFrame Project Security Requirements PSS to be displayed)-- Paul Petronelli, Christopher Doss
  4. ( 5 min) Healthcare Security and Privacy Access Control Catalog Update
    • PSS forwarded to FTSD for review/approval
  5. ( 5 min) SOA Cloud Planning Guide - Diana
  6. Status SP Privacy Engineering Framework participation as SMEs - Mike
  7. ( 5 min) Joint Vocabulary Alignment Update - Diana
  8. ( min) FHIR Security report out - John
  9. (35 min) PASS Access Control Conceptual Model (SOA) ballot reconciliation Update - Diana, Don Jorgenson, Mike, Dave

Meeting Minutes (DRAFT)

Meeting Minutes approval

The minutes from the November 3, 2015 meeting were unanimously approved.

SOA Planning Guide

New SOA project, PSS submitted

  • Main deliverable is a white paper
    • an informative document as to how HL7 standards should be applied as organizations migrate their information to the Cloud
    • information can be found in the PSS
    • there is a security section, addressing security and privacy considerations associated with cloud (blueprints)
  • Does Security want to be involved? A co-sponsor, interested party or do we care?
    • Cloud security depends on the cloud service provider
    • this is an item being worked on by NIST
    • Mike believes that this is immature and will most likely be a part of the infrastructure. Does not see that we have a huge role here.
  • Are there any objections for us being listed as an interested party?
    • None heard

SP Privacy Engineering Framework participation as SMEs

  • A work item proposal out of ISO/SC 27 (ANSI INCITS)
  • Mike will give document to Suzanne for posting

FHIR Security

Meeting later this afternoon. Please join.

Joint Vocabulary Alignment Update

See CBCC update.

PASS Access Control Ballot Reconciliation

  • Rows 53-91
  • Motion made to accept the comment dispositions (Rows 53-91; comment #50-88) as presented (Mike/Suzanne)

Objections: none, Abstentions: none, in favor: 9

Ballot Reconciliation (cont.)

starting with Row 91 (comments 89-99)

Objections: none, Abstentions: none, in favor: 9

Meeting adjourned at 1257 PDT