AARC PDK v2

Practical steps to getting started with Policies for a Research Collaboration

Note: we are missing DP CoCo from these steps

1. Define a unique name for your collaboration (recommend DNS) 
2. Identify a governance body to make policy decisions
3. Define the purpose of your collaboration (this will be used for your AUP) 
4. We strongly suggest (although this is out of scope here) 
   1. Identifying your primary assets
   2. Completing a risk assessment
   3. Defining your rules of participation and the escalation procedure in case of non-compliance
   4. Any additional legal and regulatory compliance necessary
5. Define, or agree to adopt as is, the following 6 documents and seek endorsement from the governance body
6. Review the AEGIS endorsed policy guidelines required for AARC compliance and ensure their technical implementation
   1. Identify your assurance requirements following https://aarc-community.org/guidelines/aarc-g031/ 
   2. Identify suitable token lifetimes
7. Ensure that the policies are presented to and accepted by the relevant audiences
8. Publish your documents and responsible parties at a suitable location 

-------

Full Trust Framework links

An analysis of the improvements required on PDK v1 is included in https://doi.org/10.5281/zenodo.15506826 

WISE Baseline AUP guidance WISE Baseline AUP guidancwe Attribute authorities and membership services guidance Manage your community members Operational Security for your services Security for your services Incident Response collaboration Service Levels and data classification