OASIS OPENC2 TECHNICAL COMMITTEE MEETING (Final Version) 16 August 2017

Agenda (page one of two) Time Topic Presenter 11:00 – 11:02 Call to Order and Roll Call Joe Brule 11:02 – 11:04 Approve Minutes of Previous Meeting OpenC2 Subcommittee Reports 11:04 – 11:09 Implementation Considerations Bret Jordan, David Lemire 11:09 – 11:13 Actuator Profile Dave Kemp, Jyoti Verma 11:13 – 11:15 Language Jason Romano, Duncan Sparrell Old Business: 11:15 - 11:19 Face to Face Bret Jordan

Agenda (page two of two) Time Topic Presenter New Business 11:19 - 11:24 Formation of GitHub Repositories Joe Brule 11:24 – 11:53 OpenC2 Assumptions and Design Considerations Joe Brule, Jason Romano 11:53 – 11:57 Query for New Business 11:57 – 11:59 Action Item Review Joyce Fai 12:00 Adjourn

Call to Order and Roll Call Joe Brule To expedite the roll call process, kindly record your attendance for today’s meeting within Kavi https://www.oasis-open.org/apps/org/workgroup/openc2/manage/track_attendance.php?day=&event_id=45705 If for whatever reason you are unable to do so, send the Executive Secretary a record of your attendance through email and we will track your attendance onto the OASIS OpenC2 site for this meeting.

Approve Minutes Joe Brule OpenC2 TC Minutes for July 13 Meeting: https://www.oasis-open.org/apps/org/workgroup/openc2/download.php/61375/OpenC2%20TC%20Minutes%2020170713.pdf Slide Decks from previous meeting (for reference) https://www.oasis-open.org/apps/org/workgroup/openc2/download.php?document_id=61175

OpenC2 Subcommittee Reports Near term Subcommittee Tasks Activities Progress/ Current status Plans/ Roadmap Issues Schedule/ logistics Participation in the Subcommittees is the path to success

Implementation Considerations

Activities Initial IC-SC meeting held 2 August 19 participants Discussed SC scope, work tempo, & collaboration tools Introduced candidate work topics IA Implementation Considerations Transport Specification Invited SC member work item proposals & contributions

Progress Suggestions at 2 August meeting: Non-normative guidance document for new OpenC2 implementers Use case development Contribution of implementation use case starting points (Duncan Sparrell) TC chair establishing repositories

Plans Review and develop user cases Review IA considerations document Identify candidate transport protocols Incorporate SC member suggestions Need to manage dependencies on Language and Actuator Profile SC progress

Meeting Schedule Monthly meetings, announced: Via OASIS email On Slack #meetings and #implementation channels Schedule: first Wednesday of every month Next meetings (all at 1300 ET / 1700 UTC) 6 September 2017 4 October 2017 WebEx details on TC calendar event in Kavi

Actuator Profile

Activities Initial Actuator Profile SC meeting held 26 July 11 participants Discussed SC scope, work tempo, & collaboration tools

Plans Data call for actuator capabilities to be presented to full TC Spreadsheet containing Actions and Targets SMEs to check items applicable to their products Goal: identify common (“foundation”) fields Action categories: Config: (start / stop / set / query /…) Threat: (allow / deny / mitigate /…) OASIS-ify Firewall and Router profiles

Meeting Schedule Biweekly meetings, announced: Via OASIS email On Slack #meetings and #actuator profile channels Schedule: second and fourth Wednesday of every month Next meetings (all at 1300 ET / 1700 UTC) 23 August 2017 13, 27 September 2017 11, 25 October 2017 WebEx details on TC calendar event in Kavi

Language

Activities Meetings Held Design Principles reviewed 18-Jul, ~14 attendees 25-Jul, ~11 attendees 1- Aug, ~13 attendees 8-Aug, ~11 attendees 15-Aug, ~11 attendees Design Principles reviewed Language Specification rework in progress Glossary baseline

Progress Language Specification rework in progress Glossary baseline Design Principles reviewed Language Specification Scope Issue resolved at 8/15 mtg Glossary baseline working document in GitHub Wiki established

Plans Language Specification Glossary Make use cases Get agreed changes into working draft property tables Glossary OASIS-ify start adding meat Evaluate GitHub experiment i.e., git cm vs. googledocs Make use cases Get baselines of other docs into OASIS systems

Working Documents Language Specification Glossary baseline - https://drive.google.com/open?id=1XYXbMCUEENFv1ql4SE8mvmCDKE1PHOvJh_1E6_Th3RM working draft - https://drive.google.com/open?id=1l7rIZl_I_zZb1FQOMYZkfUI04O7sNasZ-ozUvMn5SMU Glossary baseline - https://github.com/oasis-tcs/openc2-glossary/blob/master/glossary.md List other docs we own here no work yet

Meeting Schedule Weekly meetings, announced: Via OASIS email On Slack #meetings and #language channels Schedule: Tues of every week Next meetings (all at 1300 ET / 1700 UTC) 22 August 2017 29 August 2017 5 September 2017 12 October 2017 WebEx details on TC calendar event in Kavi

Old Business Face to Face

Face to Face Purpose No decisions are made at a F2F Frequency Location Provide a means of having high bandwidth discussions to talk through complicated and detailed topics. No decisions are made at a F2F Frequency 2-3 times a year Location Need people / organizations willing to host Provide remote access via a phone bridge

OASIS GitHub Repositories Full resolutions at: https://drive.google.com/drive/folders/0B-FunCZrr-vtRFlkemZETVl5dzA Maintainers are OASIS members Technical Leads are non-members g2bsd Martinez ocas Sparrell nsa-rd Kemp jadn yuuki Kemp/ Brule OrchID Kemp/ Bradbury ReactorRelay ReactorMaster

Design Considerations/ Assumptions https://docs.google.com/presentation/d/1xUI4Xas05aS57KkyNzIPNrRNr1sI_zL-fkloMd4tkc8/edit#slide=id.p7

Poll for New Business

Action Item Review Status of Old Action items New action item review Following the monthly TC meeting provide a brief summary of the motions resolved and ask if there are any other objections from the members who were unable to attend.

Status/Resolution of Actions

Adjourn Upcoming TC Meetings September 20 at 11:00 and 21:00 Eastern (15:00 and 01:00 UTC) October 18 at11:00 and 21:00 Eastern (15:00 and 01:00 UTC) November 15 at11:00 and 21:00 Eastern (15:00 and 01:00 UTC) December 20 at11:00 and 21:00 Eastern (15:00 and 01:00 UTC)

Bonus Material