...
- Define a unique name for your collaboration (recommend DNS)
- Identify a governance body to make policy decisions
- We strongly suggest (although this is out of scope here)
- Identifying your primary assets
- Completing a risk assessment
- Defining your rules of participation and the escalation procedure in case of non-compliance
- Any additional legal and regulatory compliance
- Define the purpose of your collaboration → this will be used for your AUPAUP
- Identify your assurance requirements following https://aarc-community.org/guidelines/aarc-g031/ and ensure its technical implementation
- Define the following 6 policies and seek endorsement from the governance body
- Ensure that the policies are presented to and accepted by the relevant audiences
- Publish your policies at a suitable location
...