Editor’s Note: The NSTIC governance docoument is attached below.
From: NIST
Dear NSTIC Stakeholders,
I am pleased to announce the publication of a new NIST report entitled Recommendations for Establishing an Identity Ecosystem Governance Structure. http://www.nist.gov/nstic/2012-nstic-governance-recs.pdf
Following on the heels of last week’s Federal Funding Opportunity (FFO) for NSTIC pilot programs, this new report lays out a path to establish what I have long viewed as the “long pole in the tent” of NSTIC implementation: the establishment of a privately-led steering group to tackle the complex policy and technical issues needed to create the Identity Ecosystem envisioned by the NSTIC.
The recommendations in this new report were directly influenced through our outreach to stakeholders like you. Last summer we sought feedback from stakeholders on how to create and establish a private sector-led Identity Ecosystem Steering Group. Through responses to a Notice of Inquiry (NOI) and a public workshop, we were able to collect invaluable insight from a broad cross section of stakeholders. Over 270 participants attended a June 9-10 workshop, and 57 stakeholders from private industry, consumer advocacy groups, privacy protection organizations, state government, and members of the financial and health care communities provided formal responses to the NOI.
This new report summarizes the responses and insights we received from across the community, and importantly, provides the government’s recommendations on the establishment of an Identity Ecosystem Steering Group that can bring together all NSTIC stakeholders – including the private sector, advocacy groups, public sector agencies and other organizations – to jointly create an online environment where individuals and organizations will be able to better trust one another, with minimized disclosure of personal information.
The new report contains several key recommendations, including:
- The Steering Group should be established as a new organization that is led by the private sector in conjunction with, but independent of, the federal government.
- The group should be structured to safeguard individual privacy and the underrepresented, through mechanisms like a special privacy coordination committee and an appointed ombudsman – as well as a charter which embraces openness, transparency, balance, consensus, and harmonization as key operating principles.
- An administrative body to support the Steering Group should be initially funded by the government through a competitive two-year grant – to catalyze its formation and ensure there are no barriers to participation. After a period of initial government support, the steering group should establish a self-sustaining structure capable of allowing continued growth and operational independence.
The report also includes a recommended charter to help jumpstart the Steering Group’s initial activities.
NIST intends to issue a Federal Funding Opportunity (FFO) for an organization to convene the Identity Ecosystem Steering Group and provide it with ongoing secretarial, administrative and logistical support. This will enable the group to convene its first formal meeting late this spring. We expect to publish the FFO in the next two weeks.
NIST is also planning a follow-on workshop on March 15, 2012 at the Department of Commerce in Washington, D.C., to convene stakeholders, review the findings of the report and jumpstart NSTIC implementation activities in advance of the formal creation of the Steering Group later this spring. Specifically, we want to kick off a discussion on the governance recommendations and charter amongst stakeholders – ensuring that the first formal meeting of the Steering Group focuses less on the structure of the Group, and more on an actual work plan to tackle creation of the Identity Ecosystem Framework.
Further information about this event and other upcoming NSTIC events will be available at: http://www.nist.gov/nstic.
As always, we appreciate your continued interest and efforts – and look forward to working with you as we continue implement NSTIC and the Identity Ecosystem!
Leave a Reply