Page History

...

The Policy and Best Practice Harmonisation activity works on operational and security aspects and policies to complement the technical research work carried out in the architecture and pilot work packages, and delivers a set of recommendations and best practices to implement a scalable scaleable and cost-effective policy and operational framework for the integrated AAI. Following the Community First approach, and driven by the use cases from the AARC Pilots, the policy harmonisation task produces both generic guidelines (such as on data protection and acceptable use policy) as well as specific guidelines for communities that are implementing the Blueprint Architecture.

In AARC, we put place primary focus on a selected set of elements :

...

that are currently the most pressing for either communties or generic Infrastructure AAIs:

• Security Incident Response in federated environments
  • including guidelines on how to property protect your community attribute system
  • and how to prepare and what to do in case of incidents
• Service- and Infrastructure-centric policy support, includingModels of sustainability and support for 'guest' identity
  
  • Protection of (mainly personal) data that is generated as a result of infrastructure use (e.g. in accounting) and the impact of GDPR 
  • Attribute release from the proxy
  • Security For Collaboration among Infrastructures assessment
• e-Researcher centric policies,
  
  • alignment of Acceptable Use Policies
  • Assurance Level baseline and differentiated assurance profiles (alongside a self-assessment tool)
  • untangling identity assurance framework complexity
• Engagement and coordination
• Support for Infrastructures and Communities with the Policy Development Kit (PDK) (jointly with NA2)

Lastly, it is imperative that any policies are agreed to in a scalable way: bi-lateral agreements do not work in a multi-stakeholder environment. A specific task The work on scalable policy negotiation aims to address addresses this issue by exploring ways of expressing and agreeing policy in a federated world. : Snctfi.