|
Security
Security in Active Loss Prevention
Wednesday 2pm - 5.30pm All
delegates welcome
Security Forum
Wednesday 2pm - 5.30pm; Thursday 9am - 5.30pm; Friday 9am
- 12.30pm By invitation only
The plenary theme in Paris is "Managing the Mobile Workforce"
[Agenda].
Please note the "mobile and security" session planned on the Tuesday morning,
which will be of interest to all Security-minded attendees.
Also, recognizing Security Forum concerns to link explicitly
into the business issues in risk management, we will join with the Active
Loss Prevention program members on the Wednesday afternoon to receive
presentations and discuss the latest developments in risk management.
We will also be reviewing developments on the In3 (Integrated
Information Infrastructure) strategy since it was introduced in the Anaheim
meeting in January '02. The In3 backgrounder session in the Customer Council
on Tuesday afternoon will greatly help understanding of the In3 concepts
and objectives. We need to decide what the Security Forum can and will
do to contribute to this In3 strategy.
Agenda:
Monday 8 April
|
Plenary: "Managing the Mobile Workforce" - see
http://www.opengroup.org/paris2002/plenary_outline.htm
|
Tuesday 9 April`
|
08.30-09.30:
|
Open Group Update: Overview of current focus of activities
|
10.00-12.30
|
Plenary (continued): "Mobile Security - Challenges
and Solutions" in which a number of key players from the
IT security field will demonstrate the significant issues facing
mobile users and mobile systems development. Discussion will include
authentication, remote access, integrity, VPNs, and the balance
between acceptable security and mobile access.
|
14.00-17.30
|
Customer Council meeting:
-
Explanation of In3 strategy. This will be a valuable backgrounder
for our discussion on In3 on Wed 10 April
-
Engaging with the Open Source Community
-
Web Services and security
|
Wednesday
10 April |
09.00-12.30 |
Members-only
- Introductions, Agenda & Actions Review, Expectations
- News round-up & liaison reports: Customer Council, OASIS,
RSA Security, SIMC, IETF, ISF, ICX, EURIM, STOS/CDSA, other
- The In3 strategy and contributions from the Security Forum:
What will the Security Forum contribute to The Open Group's
Integrated Information Infrastructure strategy? Specific topics
will include proposals for new activities on:
- Management of Keys
- Identity Management: status report, roles and authorizations,
Liberty/Passport
- Integrating SAML into the business environment
|
14.00-17.30
|
Security Forum with ALP Program (Open session)
Presentations and discussion on Risk Management and Security:
-
Vernon Poole - Auditor, Deliotte & Touche
-
Jeremy Hilton - JH Consulting
-
John Mawhood - Tarlo Lyons Law Practice, Commercial Technology
Dept.
|
Thursday 11 April
|
09.00-12.30 |
Members-only:
Privacy:
- Presentation on Privacy and Data Protection, Nick Mansfield
- Presentation on Guide to Data Privacy - Bob Blakley/Jacques
Francoeur
- Preparation for formal review
Guide to Use of PKI - development - Eliot Solomon
Other Business Guides:
- Disaster Recovery and Business Continuity
- Cryptography
- Identity Management
|
14.00-14.45
|
Secure Messaging Challenge
|
14.45-17.30
|
Guide to Security Patterns (GSP) - Bob Blakley
Action plans for new work, and update Security Forum roadmap
|
Friday 12 April
|
08.30-10.00
|
Reports-back on conference achievements and future plans
|
10.00-12.30
|
Work group sessions
|
Read a Summary Report and
detailed minutes from the previous Security Forum meeting in Amsterdam,
with links for Open Group members to other reports from that meeting.
The Open Group's Security
Forum
|