Working Party on Information Security and Privacy

Transcription

1 For Official Use DSTI/ICCP/REG/A(2009)1/REV1 DSTI/ICCP/REG/A(2009)1/REV1 For Official Use Organisation de Coopération et de Développement Economiques Organisation for Economic Co-operation and Development 04-Mar-2009 English - Or. English DIRECTORATE FOR SCIENCE, TECHNOLOGY AND INDUSTRY COMMITTEE FOR INFORMATION, COMPUTER AND COMMUNICATIONS POLICY Cancels & replaces the same document of 27 February 2009 Working Party on Information Security and Privacy DRAFT AGENDA OF THE 26TH MEETING To be held at the OECD Headquarters 9 and 10 March 2009, starting at 11:00 on day one and 9:30 on day two Delegates to the WPISP are invited to NOTE that: i) the morning session of March 9 will be open only to OECD member government officials; ii) the 57th session of the Committee for Information, Computer and Communications Policy (ICCP) will be held on March 2009 The cancel and replace indicates a change in document reference number of Item 7. Anne Carblanc, tel: ; fax: ; anne.carblanc@oecd.org English - Or. English JT Document complet disponible sur OLIS dans son format d'origine Complete document available on OLIS in its original format

2 WORKING PARTY ON INFORMATION SECURITY AND PRIVACY DRAFT AGENDA OF THE 26TH MEETING To be held at the OECD Headquarters 9 and 10 March 2009, starting at 11:00 on day one NOTE that the 57 th session of the Committee for Information, Computer and Communications Policy (ICCP) will be held on March 2009 at the OECD Headquarters Monday, 9 March : :05 2. ADOPTION OF THE AGENDA ACCESSION OF CHILE, ESTONIA, ISRAEL, RUSSIA, AND SLOVENIA TO THE OECD CONVENTION (OECD member government officials only) 12:50 3. PARTICIPATION OF NON GOVERNMENTAL STAKEHOLDERS (OECD member government officials only) DSTI/ICCP/REG/A(2009)1 DSTI/ICCP/ACS/A(2009)2 DSTI/ICCP(2009)1 13:00 Lunch break 14:30 4. APPROVAL OF THE SUMMARY RECORD OF THE 25th MEETING OF THE WPISP (17-18 NOVEMBER 2008) DSTI/ICCP/REG/M(2008)2 14:35 5. STATEMENT BY THE SECRETARIAT 14:45 6. OECD INNOVATION STRATEGY: INTERIM REPORT SG/INNOV(2009)1 15:15 7. ICT AND THE ECONOMIC CRISIS DSTI/IND/STP/ICCP(2009)1 DSTI/ICCP/IE(2009)1 DSTI/ICCP/CISP(2009)1 15:45 8. THE USE OF THE INTERNET TO COMPILE STATISTICS AND INDICATORS ON ICT USE 16:00 Coffee break 16:30 9. IDENTITY MANAGEMENT (IdM) a) Draft Primer on the Role of Digital Identity Management in the Internet Economy b) Options for next steps for IdM DSTI/ICCP/REG(2008)10/REV1 18:00 Close of the day 2

3 Tuesday 10 March : INFORMATION SECURITY a) Follow-up work on Malware i) Update on the methodology for the second study by Delft University on the Economics of Malware ii) Proposal for co-operation with the Council of Europe and with APEC b) OECD-APEC work on Indicators for Security and Trust c) Updates on cyber-security work in other international organisations DSTI/ICCP/REG(2009)1 DSTI/ICCP/REG(2008)14 11:00 Coffee Break 11: SENSOR-BASED ENVIRONMENTS DSTI/ICCP/REG(2009)2 12: PRIVACY a) Dialogue on Privacy, Technology, and Globalisation: update and next steps DSTI/ICCP/REG(2009)3 13:00 Lunch break b) Updates on privacy work in other international organisations 14: PROTECTION OF CHILDREN ONLINE a) Update on the preparation of the APEC-OECD Symposium b) Next steps Room Document DSTI/ICCP/REG(2009)4 15: OTHER BUSINESS Date and venue of the next meeting 16:00 Close of the meeting *16:30 18:00 Meeting of the volunteer group on IdM 3

4 NOTES ON THE DRAFT AGENDA Monday, 9 March ADOPTION OF THE AGENDA DSTI/ICCP/REG/A(2009)1/REV1 Action required: The Working Party is invited to adopt the Draft Agenda. 2. ACCESSION OF CHILE, ESTONIA, ISRAEL, DSTI/ICCP/ACS/A(2009)2 RUSSIA, AND SLOVENIA TO THE OECD CONVENTION (OECD member government officials only) 3. PARTICIPATION OF NON GOVERNMENTAL DSTI/ICCP(2009)1 STAKEHOLDERS (OECD member government officials only) The Secretariat will provide an update on the progress made in bringing non-governmental stakeholders into the work of the ICCP Committee and its working parties. At its 56th Session the Committee agreed to formalise the participation of civil society and the Internet technical community in its work and that of its Working Parties. The Committee will consider the practical modalities for the participation of all nongovernmental stakeholders at its meeting on March. It is proposed that the Committee apply the same modalities to its working parties as well. Action required: The Working Party is invited to note the update. 4. APPROVAL OF THE SUMMARY RECORD OF DSTI/ICCP/REG/M(2008)2 THE 25th MEETING OF THE WPISP (17-18 NOVEMBER 2008) The Secretariat has received no comments on the Draft Summary Record of the Working Party s 25th Meeting, held on November 2009 in Paris. Action required: The Working Party is invited to approve the Record of its 25th meeting. 5. STATEMENT BY THE SECRETARIAT An overview of recent developments within the Directorate for Science, Technology and Industry, as well as in the OECD more broadly, that are of relevance to the Working Party will be provided. Action required: The Working Party is invited to note and discuss any issues raised by the statement. 4

5 6. OECD INNOVATION STRATEGY: INTERIM REPORT SG/INNOV(2009)1 The Secretariat will provide an overview of progress made on the Innovation Strategy. The Innovation Strategy Interim Report will be discussed by the ICCP Committee at its meeting on March. Action required: The Working Party is invited to note the update. 7. ICT AND THE ECONOMIC CRISIS DSTI/IND/STP/ICCP(2009)1 Update on OECD work related to the impact of the economic crisis on ICTs and the role of ICTs in economic recovery DSTI/ICCP/IE(2009)1 DSTI/ICCP/CISP(2009)1 The Secretariat will provide an update on the work in the Directorate of Science, Technology and Industry related to the impact of the economic crisis on ICTs and the role of ICTs in economic recovery. Action required: The Working Party is invited to note the update. 8. THE USE OF THE INTERNET TO COMPILE STATISTICS AND INDICATORS ON ICT USE Following up on the discussion at the November 2008 WPISP meeting, the Secretariat for the Working Party on Indicators for the Information Society (WPIIS) will propose a work plan to move forward on the project. Interested delegations will be invited to confirm their participation in the work with WPIIS. Action required: The Working Party is invited to discuss and agree on the proposed work plan and interested delegations are invited to confirm their participation in the work. 9. IDENTITY MANAGEMENT DSTI/ICCP/REG(2008)10/REV1 a) Draft Primer on the Role of Digital Identity Management in the Internet Economy The draft primer, revised following a meeting on 19 January of the IdM volunteer group, will be introduced for discussion by the Working Party. Action required: The Working Party is invited to discuss and comment on the text of the draft primer and agree on a process for finalising the document for submission to the ICCP Committee for declassification. b) Options for next steps for IdM Building on the work of the primer some options will be presented to the Working Party on how to proceed with the second phase of the work on IdM. A preliminary discussion on this topic was held in March 2008 on the basis of proposals articulated in DSTI/ICCP/REG(2008)9. Action required: The Working Party is invited to discuss next steps in IdM and provide direction to the volunteer group on how to proceed with the second phase of the work. 5

6 Tuesday 10 March INFORMATION SECURITY a) Follow-up work on Malware DSTI/ICCP/REG(2009)1 i) Update on the methodology for the second study by Delft University on the Economics of Malware Following up on DSTI/ICCP/REG(2008)7, an update on the methodology for the second study on the economics of malware by Delft University, as consultant to the OECD, will be presented. Action required: The Working Party is invited to discuss and provide input on the methodology. ii) Proposal for co-operation with the Council of Europe and with APEC Options for further co-operation on malware with APEC and the Council of Europe will be presented by the Secretariat. Action required: The Working Party is invited to provide direction to the Secretariat on how to organise the co-operation with APEC, the Council of Europe and other organisations, as appropriate. b) OECD-APEC work on Indicators for Security and Trust DSTI/ICCP/REG(2008)14 Following up on the discussion at the November 2008 WPISP meeting, delegations interested in supporting this joint work with APEC the development of a new Model Survey for the collection of statistics on government information and communication technologies (ICT) security and trust will be invited to confirm their interest. Action required: The Working Party is invited to discuss and agree on the work proposal and interested delegations are invited to confirm their support for the work. c) Updates on cyber-security work in other international organisations Updates will be provided on activities related to cyber-security in APEC, the European Commission and ENISA. Action required: The Working Party is invited to note the updates 11. SENSOR-BASED ENVIRONMENTS DSTI/ICCP/REG(2009)2 A proposal for an OECD workshop on sensor-based environments to be held in Lisbon on 8-9 June 2009 will be introduced. Delegates will be invited to nominate experts to a volunteer group to provide further guidance in planning the conference. Action required: The Working Party is invited to discuss and provide input to the proposal. 6

7 12. PRIVACY a) Dialogue on Privacy, Technology, and Globalisation: DSTI/ICCP/REG(2009)3 update and next steps The secretariat will provide an update regarding work on the global privacy dialogue, including plans for two workshops to be co-organised by the OECD with other partners in March and April Action required: The Working Party is invited to discuss and note the plans. b) Updates on privacy work in other international organisations Updates from a number of international organisations working on privacy, including APEC, the European Communities, and the International Conference of Data Protection and Privacy Commissioners, will be presented. Action required: The Working Party is invited to note the updates. 13. PROTECTION OF CHILDREN ONLINE a) Update on the preparation of the APEC-OECD Room Document Symposium An update on the preparation of the Symposium, to be held in Singapore on 15 April 2009, will be presented. Action required: The Working Party is invited to note and provide input on preparations for the symposium. b) Next steps DSTI/ICCP/REG(2009)4 A revised proposal (Scoping Paper) by Japan on OECD work on International Co-operation for a Safer Internet for Children will be presented. Action required: The Working Party is invited to discuss and agree on the work proposal and interested delegations are invited to confirm their support for the work. 14. OTHER BUSINESS Date and venue of the next meeting The next WPISP meeting will be held at OECD Headquarters in Paris on October 2009 (back-toback with the ICCP meeting). 7

8 Tentative List of remaining WPISP-related events for 2009, for information: ICCP: March (Paris, OECD Headquarters) FTC-OECD-APEC Data Security Workshop March (Washington, DC) APEC-OECD Symposium on Children s Internet Safety 15 April (Singapore) CIPL-Irish DPA-BIAC-OECD meeting on privacy accountability 28 April (Dublin) OECD Conference on Sensor-based Environments 8-9 June (Lisbon) WPISP: October (Paris, OECD Headquarters) ICCP Technology Foresight Forum 14 October (Paris, OECD Headquarters) ICCP Committee: October (Paris, OECD Headquarters) *16:30 18:00 Meeting of the volunteer group on IdM 8