ISO/IEC JTC 1/WG 8 N 61

Transcription

1 ISO/IEC JTC 1/WG 8 N 61 ISO/IEC JTC 1/WG 8 Governance of IT Secretariat: BSI (United Kingdom) Document type: Title: Meeting Report JTC 1 WG 8 Minutes March v1 Status: Date of document: Source: Expected action: of secretary: Committee URL: ISO/IEC JTC 1 WG 8 Secretariat INFO julia.dropmann@standards.org.au

2 MEETING MINUTES v1 Meeting ISO/IEC JTC 1/WG 8 Governance of IT (MTG_001) Meeting Date Tuesday 5 March 2013 Friday 8 March 2013 Meeting Location Standards Australia Exchange Centre Level 10, 20 Bridge Street SYDNEY NSW 2000 Reception: Meeting Hours: Tuesday 5 March 9:00-17:00 Wednesday 6 March 9:00-17:00 Thursday 7 March 9:00 17:00 Friday 8 March 9:00 17:00 Dial-in Details: Provided in: N0046

3 FINAL DRAFT MINUTES 1. Opening of meeting 1.1 Welcoming Remarks The JTC 1/WG 8 Chair welcomed delegates to the first JTC 1/WG 8 meeting after its establishment at the JTC 1 Plenary in November The Chair noted the participation of experts from both JTC 1/WG 6 and JTC 1/SC 7/WG 40 and the importance of this meeting to continue and develop standards for the Governance of IT. 1.2 Welcome from hosts Standards Australia CEO, Colin Blair welcomed the group to their first meeting. He noted the importance of standards in the Governance of IT and Australia's engagement in this space, reaching back to AS He wished the group a successful and productive meeting. The Secretariat added her welcome to the group and thanked members for their attendance, given the recent establishment of the group. She echoed Mr Blair's sentiments, noting Australia's support to this area of work moving forward and looked forward to a productive meeting. 2. Introductions/Roll call of participants Name Country Attendance Julia Dropmann AU Present John Graham AU Present Jan Begg AU Present Geoff Clarke AU Present James Woods AU Present Erin Casteel AU Present Geoff Clarke AU Present Sandeep Mathur AU Dial-in Charles Provencher CA Apology John Thorp CA Apology

4 Elina Huttunen FI Present Gargi Keeni IN Present Terry Landers IRL Present Max Shanahan ISACA Dial-in Robert Stroud ISACA Present Yoshiyuki Hirano JP Present Keiko Shimizu JP Present Yonosuke Harada JP Present Kyung Tae Hwang KR Present Hyung Jin Kwon KR Present Yvette Backer NL Present Alison Holt NZ Present Myles Ward NZ Present Alisdair McKenzie NZ Present Brian Cusack NZ Present Sixten Bjorklund SE Apology Ng Lay Ngan SIN Present Peter Brown UK Dial-in Philip Brown UK Present Dick Brackney US Dial in Kamal Dave US Present Dorian Cougias US Dial in Max Blecher ZA Present Grantham Daniels ZA Present 3. Adoption of agenda (N0054) The group confirmed the agenda N Confirmation of ToR and Work Items (N0017)

5 The group confirmed the ToR and Work Items as outlined in N Review of existing and potential WG 8 Liaison Organisation 5.1. JTC 1/ SC 7 Systems and Software Engineering 5.2. JTC 1/SC 27 IT Security Techniques 5.3. JTC 1/SC 38 Distributed Application Platforms and Services 5.4. ISO TC 159 Ergonomics 5.5. ISO TC 258 Project, programme and portfolio management 5.6. ISO PC 271 Compliance Programs 5.7. ISACA (N0051) 5.8. It-SMF The group discussed the relevance and contributions from liaisons to the work of Governance of IT and confirmed the liaison committees and organisations as listed above. ACTION ITEM 1/19 The Convenor and Secretariat to circulate a communique to all liaison organisations, providing an update on the work of JTC 1/WG 8 and request liaison status with ISO PC /19 John Graham and Sandeep Mathur to make contact with ISO TC 258 in regards to exploring liaison status with JTC 1/WG 8. 3/19 Rob Stroud, Erin Casteel and Alison Holt to follow up on a potential It-SMF liaison representative to JTC 1/WG 8 and advise the Convenor and Secretariat accordingly. 1/22 JTC 1/WG 8 would welcome a letter of invitation from Unified Compliance Framework to request liaison status with JTC 1/WG 8. 2/22 JTC 1/WG 8 would welcome a letter of invitation from OASIS to request liaison status with JTC 1/WG 8.

6 3/22 JTC 1/WG 8 would welcome a letter of invitation from BiSL to request liaison status with JTC 1/WG 8. 4/22 JTC /WG 8 confirms and nominates the following liaison representative with JTC 1/WG 8 as follows: JTC 1/ SC 7: Erin Casteel JTC 1/SC 27: Brian Cusack JTC 1/SC 38: Johan Eksteen ISO TC 159: Alison Holt, Alisdair McKenzie ISO TC 258: Sandeep Mathur ISO PC 271: Julia Dropmann ISACA: Rob Stroud and Max Shanahan It-SMF: TBC 6. Review and confirmation of existing Study Group and Ad-hoc Groups 6.1. JTC 1/WG 6/Gap Analysis (N0041) 6.2. JTC 1/WG 6/Benefits Realisation (N0039-N0040) 6.3. JTC 1/SC 7/WG 40 Business Frameworks Mapping of the BiSL framework to ISO/IEC (N0059) 6.4. JTC 1/SC 7/WG 40 Governance of Consumer IT in a Business Domain (N0052) 6.5. JTC 1/SC 7/WG 40 Governance of Human Touch points with IT (N0060) 6.6. JTC 1/WG 6 and SC 7/WG 40 - Logo & branding for Governance Marketing Materials The leader of each of Study Group and Ad-Hoc Group provided a brief update to the group. Some provided a presentation which has been listed as an N-document above. 5/22 JTC 1/WG 8 confirms the existing Study Groups and Ad-Hoc Groups. ACTIONS

7 4/19 Gap Analysis John Graham to provide a Gap Analysis report by 3 June 2013 for discussion at the next JTC 1/WG 8 meeting. JTC1/WG 8 members are requested to send all feedback to John Graham by 29 April /19 Business Frameworks: Mapping of the BiSL framework to ISO/IEC Yvette Backer to provide a report by 1 July 2013 on an approach to map ISO/IEC with external frameworks for discussion by the group at the next meeting. JTC 1/WG 8 members are requested to provide input to Yvette by 27 May /19 Governance of Consumer IT in a Business Domain (N0052) Brian Cusack and Alison Holt to provide a report by 1 July 2013 on the Governance of Consumer IT for discussion at the next JTC 1/WG 8 meeting. JTC1/WG 8 members are requested to send all feedback to Brian and Alison by 27 May /19 Governance of Human Touch points with IT Alisdair McKenzie and Alison Holt to provide a report by 1 July 2013 on Governance of Human touch points with IT for discussion at the next JTC 1/WG 8 meeting. JTC1/WG 8 members are requested to send all feedback to Brian and Alison by 27 May /19 Logo & branding for Governance Marketing Materials Alison Holt to follow up I.P regulations and feasibility of a Governance of IT logo with ISO and report back at the next meeting. 5. ISO/IEC IT Audit Audit guidelines for Governance of Information Technology 5.1. Presentation 5.2. Discussion on Extension of Ballot Result (N0016) and current WD3 & Report (N0019-N0020) 5.3. Presentation from Korea (N0047) & History (N0053) 5.4. Confirmation of next steps The group noted the delay in progressing ISO/IEC to a PDTR as a result of the

8 recent restructure of JTC 1/WG 8. The group discussed the most recent draft WD3 and matter concerning its alignment with ISO/IEC was raised. The group were in agreement that the project editors should revert to the scope of WD2 and amend the draft for a PDTR. Korea and Japan also provided a position statement on the work which can be found in N0056. ACTION ITEMS 9/19 Yonosuke Harada, Hyung Jin Kwon and Myles Ward to prepare an ISO/IEC PDTR to the JTC 1/ WG 8 Secretariat by the beginning of May /22 JTC 1/WG 8 Secretariat to request an extension from JTC 1 on ISO/IEC on the grounds of the recent restructure and subsequent delay. 7/22 ISO/IEC PDTR to proceed to a 3 months ballot and comment period to JTC ISO/IEC Governance of Digital Forensic Risk Framework 6.1. Presentation 6.2. Discussion on CD/SoV (N0021-N0023) 6.3. Confirmation next steps i The group reviewed the Summary of Voting and Disposition of Comments. The CD passed ballot and will proceed to DIS. Brian Cusack raised a number of comment submitted which were discussed by the group and will be resolved and outcomes reflected in the Disposition of Comments accordingly. Australia noted its concerns for shortcomings in the draft as indicated by their comments.

9 ACTION ITEMS 10/19 Brian Cusack to provide updated DoC and DIS to JTC1/WG 8 Secretariat to submit for a 3 months ballot and comment period to JTC 1. 8/22 ISO/IEC DIS to proceed to a 3 months ballot and comment period to JTC 1 by April Discussion on ISO/IEC Series and Definitions John Graham provided a presentation on the definitions and substitution rule to ensure all definitions comply with ISO requirements. This presentation can be found in N0057. ACTION ITEMS 11/19 John Graham to propose aligned EDM definitions for use in the ISO/IEC series and find consensus with Max Blecher and Max Shanahan and inform the JTC 1/WG 8 Secretariat by 5 April 2013 to circulate to the group. 9/22 ISO/IEC series project editors agreed to find consensus and align EDM definitions for use in the ISO/IEC series. 8. ISO/IEC DTR Governance of IT Framework and Model 8.1. Presentation 8.2. Discussion on TR (pre-publication) and SoV (N0007-N0008) 8.3. Confirmation of TR and DoC (N0024-N0026, N0045)

10 Max Shanahan provided an update on the Summary of Voting and Disposition of Comments. ACTION ITEMS 12/19 Max Shanahan to provide an updated DoC and DTR2 draft to JTC 1/WG 8Secretariat for a 3 months ballot and comment period. 10/22 JTC 1/WG 8 Secretariat to request an extension for ISO/IEC from JTC 1. 11/22 ISO/IEC DTR Project Editor to proceed to a 3 months ballot and comment period. 9. ISO/IEC NP/CD Revision of ISO/IEC 38500:2008 Corporate Governance of Information Technology 9.1. Presentation 9.2. NWIP/CD Update (N0012-N0015) Omitted ZA comment (N0048) and late Italian comments (N0050) 9.3. DIS draft discussion (N0034-N0038) John Graham provided an update on the Summary of Voting and Disposition of Comments as presented in N ACTION ITEMS 13/19 John Graham to provide an updated DoC and CD2 draft to JTC 1/ WG 8 Secretariat for 3 months ballot and comment period.

11 12/22 ISO/IEC CD to proceed to a second CD ballot and comment period. 13/22 An editorial group to review the document prior to submission to the JTC 1/WG 8 secretariat. The group will include Yvette Backer, Kamal Dave, Sixten Bjorklund, KT Hwang, Bill Powell, Kelly Dempsey, Erin Casteel and Brian Cusack. 14/22 JTC1/WG 8 recommends that JTC 1 appoint John Graham (AU) as Project Editor and Yoshiyuki Hirano (JP) be Co-Editor of ISO/IEC ISO/IEC PDTS Corporate Governance of IT Implementation Guide Presentation Discussion on PDTR DoC and SoV (N0032-N0033) Confirmation of next steps Max Blecher thanked Sixten, Arno, John, Jan and Alison on their contributions to the ISO/IEC Max Blecher provided an update on the Summary of Voting and Disposition of Comments. ACTION ITEMS 14/19 Max Blecher to provide an updated DoC and DTS to JTC 1/WG 8 Secretariat for a 3 months ballot and comment period by 15 July /19 An editorial group to review the document prior to submission in July This group will include John Thorp, Alison Holt, Jan Begg, John Graham, Yvette Backer, K.T Hwang and Yonosuke Harada. 15/22

12 ISO/IEC DTS to proceed to a 3 months ballot and comment period by 15 July Outcomes to apply to ISO/IEC and ISO/IEC Japanese Presentation (N0044) Discussion Next Steps The group discussed the need to ensure consistency and alignment between ISO/IEC with ISO/IEC in relation to audit criteria and outcomes. 12. Enhancing the ISO/IEC model for Governance of IT: Principles Presentation (N0049) Discussion Next Steps Max Shanahan, in his capacity as the ISACA liaison, presented N 'Enhancing the ISO/IEC Model for Governance of IT Setting a firmer foundation for further development'. The need for a standing document on governance principles was discussed. Max Blecher pointed out that it was an urgent task for ISO/IEC Jan Begg suggested that the development of governance principles should be separated from ISO/IEC Max Shanahan pointed out that this was in line with the view in Dublin which suggested that assessment should be an attachment rather than part of ISO/IEC Max Blecher requested that a leader of the group drive this work and volunteered himself. Max Shanahan asked that the group be chaired by someone other than a project editor to avoid conflict of interest. This was supported by John Graham. In the light of no one else volunteering Max Blecher s nomination was accepted. ACTION ITEM 16/22 Max Blecher will lead a group to provide a standing document on the structure and content of governance principles for circulation to the group by the end of July 2013 and discussion at the next JTC 1/WG 8 meeting. The group will include Max Shanahan, Dorian Cougias, Yonosuke Harade, K.T Hwang and John Graham.

13 16/24 A standing document on the structure and content of governance principles will be discussed at the next JTC 1/WG 8 meeting. 13. WG 8 Roadmap and Strategy Discussion (N0027-N0029,N0041-N0042) Confirmation of Roadmap The group identified the need to create a strategic intent and roadmap in moving forward and was confirmed by the group in N0058. This standing document will also be provided as guidance to JTC 1/SWG-M as they review the placement and future of Governance and Management of IT. During the meeting, an ad-hoc group was led by Myles Ward, consisting of Grantham Daniels, Terry Landers, Ng Lay Ngan and the Secretariat who were mandated with the responsibility to draft a Strategic intent and roadmap for endorsement by JTC 1/WG8. ACTION ITEMS 17/19 JTC 1/WG 8 Convenor and Secretariat to update the Strategic Intent and Roadmap accordingly with input from the group at a teleconference (mid May) and distributed to the next SWG-M meeting in August /19 JTC 1/WG 8 Convenor, Secretariat and members attending the SWG-M meetings to provide a presentation on JTC 1/WG 8 Strategic Intent and Roadmap. 17/22 JTC 1/WG 8 confirms the Strategic Intent and Roadmap and submission to SWG-M for their discussion. India: Abstain 14. Review of existing and potential Study Groups / Ad-hoc groups Benefits Realisation

14 Presentation (N0039-N0040) Discussion Confirmation of next steps Sandeep Mathur provided a presentation on the benefits realisation work carried out previously in JTC 1/WG 6. After much discussion, JTC 1/WG 8 identified the importance of this work in Governance of IT and the need to progress it accordingly. ACTION ITEMS 19/19 Sandeep Mathur (with assistance from Rob Stroud and K.T Hwang, and Ng Lay Ngan) to provide a NWIP for a TR on Benefits Realisation to the JTC 1/WG 8 Secretariat by end of April for the group's review. 18/22 JTC 1/WG 8 agreed to prepare a NWIP for a TR on Benefits Realisation for the group's review. 15. JTC 1 Plenary 2012 Resolution 32: Assignment for the SWG on Management (N0018) Discussion Recommendation to JTC 1/SWG-M See Agenda Item Other Business No other business was raised. 17. Recommendations for JTC 1

15 RECOMMENDATION 1/1 JTC1/WG 8 recommends that JTC 1 appoint John Graham (AU) as Project Editor and Yoshiyuki Hirano (JP) be Co-Editor of ISO/IEC Confirmation of future meetings /22 JTC 1/WG 8 to request Japan to host the next JTC 1/WG 8 meeting from August /22 JTC 1/WG 8 to request the Netherlands to host the next meeting JTC 1/WG 8 meeting in March Appreciations 21/22 The Secretariat thanked the Convenor and JTC1/WG 8 members for the contributions and efforts throughout the week. 22/22 The Convenor and JTC 1/WG 8 members expressed their appreciation to Standards Australia and the secretariat for hosting the meeting.