Main page

Managing the Mobile
Workforce Plenary

Friday Plenary

Other Open Sessions

Attendees

Conference
Home Page

The Open Group
Home Page

Comments

Release Status

Latest PDF reader

Active Loss Prevention initiative

This was the first meeting of the initiative and as such we started by defining the high level approach to managing the projects.

The initiative worked with the Architecture Forum on Wednesday morning to agree how best to make use of the tools and techniques offered by The Open Group Architecture Framework (TOGAF). Following an introduction and overview of the Active Loss Prevention initiative from Ian Lloyd (Open Group), Chris Greenslade (Frietuna Consulting) - presented an overview of architecture from the system architects point of view and outlined its relevance to the initiative. Terry Blevins (Open Group) - presented on how to use business scenarios (part of TOGAF) to make models of business processes. The participants agreed to develop a series of business scenarios over the coming months. These will be used to test the concepts and outputs of the projects undertaken by the initiative.

During Wednesday afternoon, we were joined by the Security Forum to discus various aspects of risk and risk management. Presentations from John Mawhood of Tarlo Lyons (sponsor of the Risk Vocabulary project) - outlining the rational and scope of the project. This generated some useful discussion on the importance of having a vocabulary, which all agreed on. Jane Hilton (barrister) gave a presentation on the use of Certificate Policy documents as a risk management tool. Jeremy Hilton of Viviale - on the use of both an architectural approach to security management and a detailed way of defining the functional requirements of the security solutions required by a business. There was lively debate and many interesting ideas were discussed. The outputs are recorded in the full minutes of the meeting. Further discussions went on during breaks and into the evening!

On Thursday, the morning was used to scope out the trust services project. Following a presentation from Yolanta Beres of HP Research Labs, we discussed in detail the concepts of trust services and agreed that they do form a valid approach to enabling risk management and the management of trust relationships within the Internet enabled business transaction. It was also agreed to begin creating a series of business scenarios, which would be used to both demonstrate how the trust services work together and fit into real business transactions and to test the concepts and outputs of each sub project. The trust services project will be made up of a series of projects that will each focus on the delivery of a single trust service.

On Thursday afternoon, we scoped out the risk vocabulary project. After some discussion, it was agreed that it was correct to call the desired document a vocabulary, as it was not a dictionary (and should not attempt to define words in an absolute sense). This vocabulary would establish the meaning for a set of risk terms and define the context within which they could be used. It is not the role of the project to redefine terms that have accepted usage in business. The vocabulary will define how a term should be used and how it will be interpreted in different industries. This effectively removes the possibility of misunderstanding created by the differing usage of terms. This project will work with the same business scenarios suggested within the trust services project. Again, the scenario will be used to test the usage of a vocabulary within the environment of the scenario.

Finally, we agreed a number of workshops for the coming months, to keep the momentum going in the projects. There will also be some teleconferences to clarify issues within a project.