Subject: [saag] SACM WG report

From: Chris Inacio <[email-masked]>
Date: Thu, 19 Nov 2020 02:59:32 +0000

Security Automation and Continuous Monitoring (SACM) met during IETF–109.

The proposed EPCP draft [1] is being withdrawn unless there are objections and new editors volunteer on the mailing list. It is viewed as demonstrating the ideas which have been adopted in other SDOs.

The CoSWID draft [2] is being updated based on AD feedback before it goes to IETF last call. A final update before LC is viewed by the WG as editorial and won’t need another WGLC.

ROLIE configuration checklist [3] was recently accepted as a working group item and we expect a relative quick turnaround in the working group on this draft.

The SACM architecture draft[4] was discussed and a new draft is imminent based on existing feedback. The WG would like more reviews and seeks volunteers for implementations.

Karen and Chris

[1] datatracker.ietf.org/doc/draft-ietf-sacm-epcp<https://datatracker.ietf.org/doc/draft-ietf-sacm-epcp/>

[2] datatracker.ietf.org/doc/draft-ietf-sacm-coswid<https://datatracker.ietf.org/doc/draft-ietf-sacm-coswid/>

[3] datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-checklist<https://datatracker.ietf.org/doc/draft-mandm-sacm-rolie-configuration-checklist/>

[4] datatracker.ietf.org/doc/draft-ietf-sacm-arch<https://datatracker.ietf.org/doc/draft-ietf-sacm-arch/>