Subject: SSAC2020-13: SSAC Review Detailed Implementation ...

3 December 2020

Subject: SSAC2020-13: SSAC Review Detailed Implementation Report

To: Lars Hoffman, Director, ICANN MSSI Organizational Effectiveness Reviews

Dear Lars,

Below please find the SSAC Review Detailed Implementation Report for the second organizational review of the SSAC. The SSAC considers that all recommendations approved by the Board have now been either completed, or integrated into ongoing SSAC processes, as documented in the SSAC Operational Procedures. The SSAC proposes that implementation be recorded as complete. The SSAC found the second Organizational Effectiveness Review to be a beneficial experience. The Independent Reviewer, Analysis Group, provided helpful recommendations which have assisted the SSAC in its efforts of ongoing improvement. The SSAC further wishes to thank ICANN Multistakeholder Strategy and Strategic Initiatives (MSSI) for their assistance and support throughout the process.

Best Regards,

Rod Rasmussen Chair, ICANN Security and Stability Advisory Committee

SSAC2 Review Detailed Implementation Report

3 December 2020

Status of This Document

At ICANN67 in March 2020, the ICANN Board accepted the SSAC2 Review Detailed Implementation Plan published on 19 December 2019, including the implementation approach contained within.1 The ICANN Board directed the SSAC2 Review Implementation Work Party to continue implementation and to provide updates to the Organizational Effectiveness Committee of the ICANN Board (OEC) through written implementation reports on progress every six months.

Accordingly, the SSAC provided a 6-month Progress Report in SSAC2020-08 dated 29 June 2020, updated by SSAC2020-10 dated 24 August 2020 to correct an error. That report advised that implementation of all but six recommendations was complete. Only Recommendations 9, 10, 18, 24, 25, and 29 were still being implemented. This report provides an update on the implementation status of those recommendations. In this update, the SSAC proposes that all of these six remaining recommendations have been either completed or integrated into ongoing SSAC processes, as documented in the SSAC Operational Procedures. The SSAC therefore considers implementation of this SSAC Review to be complete.

Other notes:

• For the sections labelled “Detailed implementation costing” costs are noted in these sections only if yearly budget allocations are needed, or if a project is needed to execute.

• Most recommendations require the help of SSAC’s ICANN support staff to execute, and SSAC assumes these costs will be provided as part of staff’s standard duties, and that at least the current staffing levels will be maintained in the future. Where usual staff support is needed, the “Detailed implementation costing” sections are marked “n/a”.

1 See Acceptance of the Second Organizational Review of the Security and Stability Advisory Committee (SSAC2) Detailed Implementation Plan, https://www.icann.org/resources/board-material/resolutions-2020-03-12-en#2.a

Recommendation1

Recommendation TheSSAChasaclearcontinuingpurposewithinICANN.ItsexistenceasanAdvisoryCommitteeshouldcontinue.

RWPCommentsinFAIIP(ifapplicable)

n/a

Whowillimplementtherecommendation:ICANNcommunity,ICANNBoard,ICANNorganization,other?

AccordingtoFAAIP:n/aUpdateaspartofthisDetailedImplementationPlan:

Activities,ifany,onwhichimplementationisdependent,orthataredependentonimplementationofthisrecommendation

AccordingtoFAIIP:n/aUpdateaspartofthisDetailedImplementationPlan:

Anticipatednon-fiscalresourcesfortheimplementation(volunteerstime,ICANNorg,tools,etc.)(ifapplicable)

Expectedbudgetimplicationsonceimplemented


Howwouldyouratethepotentialeaseofimplementationforthisrecommendation?Pleaseconsidertheimpactonneededresources,increasedbudget,Bylawschangesandotherdependencies(easy/medium/hard)




HowsoonaftertheBoardacceptanceofthedetailedimplementationplancantheimplementationstart?


Whatistheanticipateddurationoftheimplementationefforttocompletion?Short:0-10monthsMedium:≤20monthsLong:≤30months

ongoing

High-levelimplementationsteps,proposedbytheRWPandacceptedbytheBoard

AccordingtoFAAIP:n/a

UpdateaspartofthisDetailedImplementationPlan(May20):

Complete–noimplementationrequired

Proposeddetailed implementationsteps(shouldbebasedonthehigh-levelstepsprovidedbytheRWPintheFAIIP)

n/a

Recommendation2

Recommendation TheSSACshouldensurethateachadvisoryorreportprovidedtotheICANNBoardincludesahigh-levelsummarythatoutlinesthetopicorissueineasilyunderstandabletermsandliststhekeyfindingswithuniquelynumberedrecommendations.


TheSSACalreadydoesthis,andwillcontinuetodoso.TheIE’srecommendationisagoodreminder.However,someSSACdocuments,suchascorrespondence,aretoobrieftorequireahigh-levelsummaryorlistingofkeyfindings.


AccordingtoFAAIP:SSACUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:NoneUpdateaspartofthisDetailedImplementationPlan:


None




AccordingtoFAIIP:Easy

UpdateaspartofthisDetailedImplementationPlan:

HowwouldyouassessthepotentialbenefitoftheimplementationofthisrecommendationforICANNasawhole?Pleaseconsider:improvedBoardGovernance,moreefficientprocess,greaterNomComaccountabilityandtransparency,etc.(high,medium,low)

AccordingtoFAIIP:Low



AccordingtoFAIIP:Alreadydone.


Whatistheanticipateddurationoftheimplementationefforttocompletion?Short:0-10months

Medium:≤20monthsLong:≤30months


AccordingtoFAIIP:TheseproceduresarealreadydocumentedintheSSACOperationalProcedures,Section3.2.3whichspecifiesthatSSACdocumentshave“ahigh-levelsummarythatoutlinesthetopicorissueineasilyunderstandabletermsandlists,ifapplicable,theuniquelynumberedkeyfindingsandrecommendations”.

UpdateaspartofthisDetailedImplementationPlan(June2020):


Proposeddetailedimplementationsteps(shouldbebasedonthehigh-levelstepsprovidedbytheRWPintheFAIIP)

SeeHigh-levelimplementationstepsabove.

Detailedimplementationcosting n/a

Recommendation3

Recommendation Whenprovidingadvice,theSSACshouldensurethattheBoardLiaisonreviewsandprovidesfeedbackonboththesummaryandfulldocumentbeforesubmissiontotheBoard.TheSSACshouldproactivelydiscusstalkingpointsandpotentialBoardresponsetimingwiththeSSACBoardLiaison.


TheprocedureforensuringLiaisonreviewbeforepublicationisdocumentedintheSSACOperationalProceduresinsection3.2.2,andSSAChasbeenfollowingthatprocedure.Theprocedureto“proactivelydiscusstalkingpointsandpotentialBoardresponsetimingwiththeSSACBoardLiaison”shouldbeadoptedbyaddingexplicitmentionintheSSACOperationalProcedures.


AccordingtoFAIIP:SSACUpdateaspartofthisDetailedImplementationPlan:








AccordingtoFAIIP:EasyUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ImprovedCommunications



AccordingtoFAIIP:ShortlythereafterBoarddecisionUpdateaspartofthisDetailedImplementationPlan:

Whatistheanticipateddurationof

theimplementationefforttocompletion?Short:0-10monthsMedium:≤20monthsLong:≤30months


AccordingtoFAIIP:SSACtoaddspecificlanguagetotheSSACOperationalProcedures,section3.4,to“proactivelydiscusstalkingpointsandpotentialBoardresponsetimingwiththeSSACBoardLiaison”.TheSSACAdminCommittee,therelevantSSACWorkingParty,andtheBoardLiaisonwillhaveresponsibilityforexecution.


WorktoupdatetheSSACOperationalProcedurespertheaboveiscurrentlyunderway;expectedtobecompletedbyendofFebruary2020.UpdateaspartofthisDetailedImplementationPlan(May20):Complete–Section3.4ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedasabove.Nofurtherimplementationrequired.


Recommendation4

Recommendation TheSSACBoardLiaisonshouldworkwiththeICANNBoardandICANNStafftoensurethatBoardActionRequestRegister(ARR)adequatelycapturestheinformationrequiredtounderstandthestatusofadvicefromwhenitisgiventhroughitsimplementation.


Thisisalreadybeingdone-itmayrequireexplicitmentionintheSSACOperationalProcedures.


AccordingtoFAIIP:ICANNBoard,ICANNStaff,SSACBoardLiaisonUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:WillrequireassistancefromICANNstaff



AccordingtoFAIIP:TobedeterminedbyICANNBoardandStaff.ThiswillrequiresometimefromBoardstaffsupport.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:TobedeterminedbyICANNBoardandStaff.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:TBDindiscussionwithICANNBoardandStaffUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ImprovedGovernanceUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:TBDindiscussionwithICANNBoardandStaffUpdateaspartofthisDetailedImplementationPlan:

Whatistheanticipateddurationoftheimplementationefforttocompletion?

Short:0-10monthsMedium:≤20monthsLong:≤30months


AccordingtoFAIIP:

1. ICANNBoardshouldhaveICANNStaffaltertheBoardActionRequestRegister(ARR)sothatittracksrecommendationsthroughtheImplementationphasetoclosure--notjusttothepointwheretheBoardtakesanaction(passesaResolution)ontherecommendation.

2. TheAARshouldstateadditionalmilestonedates

achieved.ItisimportanttoseehowmuchtimepassesfromwhenarecommendationisgiventotheBoardandwhentheBoardconsiderstheissue(andpassesa

resolutionornot),andthentheamountoftimethatpassesbetweentheBoardresolutionandthefinishedimplementationbyStaff(ifimplementationisinvolved).

3. SeeRecommendation5--SSACtoaddspecificlanguagetotheSSACOperationalProcedurestorequireperiodicreviewofopenrecommendationstotheBoardandimplementationtasks.OntheSSACside,thiswillbetrackedbytheICANNBoardLiaisonandSSACAdminCommittee.


WorktoreviewthestructureoftheBoardARRhasbeencompletedandadditionalcolumnshavebeenaddedtorecordimplementationinformation.TheSSACARRTracker,adocumentwhichisbasedontheBoardARRandwhichtheSSACusesinternallytomonitortheprogressofSSACrecommendations,hasalsobeenupdatedinitsformattorecordadditionalinformation.TheSSACissatisfiedthattheinformationrecordedinthesedocumentsissufficienttoenablethestatusofSSACrecommendationstobeeffectivelymonitored.UpdateaspartofthisDetailedImplementationPlan(June2020):Complete–Section3.5ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedtoread:“TheSSACBoardLiaisonshouldworkwiththeICANNBoardandICANNStafftoensurethattheBoardActionRequestRegister(ARR)adequatelycapturestheinformationrequiredtounderstandthestatusofadvicefortheworkproductfromwhenitisgiventhroughimplementation.”Nofurtherimplementationrequired.

Detailedimplementationcosting Stafftime

Recommendation5

Recommendation TheSSACshouldperiodicallyreviewtheimplementationstateofpastandfutureadviceprovidedtotheICANNBoardtoensurethatallactionitemsarelistedintheARR.TheSSACshouldfollow-upwiththeICANNBoardviaitsBoardLiaisonwhenadvicehasnotyetbeenaddressedorwhenprogressisunclear.TheICANNBoardshouldperiodicallyreviewtheAARtoensurethattheBoardisconsideringSSACadviceinatimelyfashion,andthattheBoardunderstandstheimplementationstatusofrelevantBoardresolutionsbyICANNOrg.


PartofSSAC’seffectivenessdependsontheBoardconsideringSSAC’sadvice.WhiletheSSAChasnopowertoeffectchange,theBoarddoes.SSACrealizesthattheBoardmaynotacceptSSAC’sadvice.ButSSACadvicelosesvalueifnotconsideredinareasonableamountoftime.BoththeBoardandSSACshareresponsibilityforensuringthatSSACadviceisconsideredbytheBoardinatimelyfashion.AsnotedintheIE’sReport,ithassometimestakentheBoardyearstoconsiderSSACadvice.Itcanevenhappenthat,wheretherehasbeenasignificantdelayinconsideringadvice,eventsordevelopmentshaveoccurredtorendertheadviceredundantoroutdated.Atits2017AnnualWorkshop,theSSACundertookatriageofallissuedSSACreportsandidentifiedthosereportswhichshouldbefollowedup,potentiallythroughtheBTCbytheSSACBoardLiaison.TheSSACBoardLiaisonandSSACStaffarecurrentlydevotingsignificantefforttoreviewingallSSACrecommendationstocategorizethemascomplete,nolongerrelevant,oropen.AnothergoalisbettercommunicationabouttheimplementationstatusofBoardresolutions.


AccordingtoFAIIP:SSAC,ICANNBoard,ICANNBoardsupportstaffUpdateaspartofthisDetailedImplementationPlan:







Howwouldyouratethepotentialeaseofimplementationforthisrecommendation?Pleaseconsidertheimpactonneededresources,

AccordingtoFAIIP:High,easyUpdateaspartofthisDetailedImplementationPlan:

increasedbudget,Bylawschangesandotherdependencies(easy/medium/hard)


AccordingtoFAIIP:ImprovedeffectivenessofSSACandICANNBoard.Improvedgovernance,transparency,andImprovedcommunications.



AccordingtoFAIIP:ShortlythereafterUpdateaspartofthisDetailedImplementationPlan:


Primaryworkcompleted’seebelow


AccordingtoFAIIP:SSACtoaddspecificlanguagetotheSSACOperationalProceduresto:1. requireperiodic(atleasttwice-a-year)reviewofopenrecommendationstotheBoardandresultingimplementationtasks.ThereviewsandtrackingwillbeperformedbytheICANNBoardLiaisonandSSACAdminCommittee.2. ICANNBoardLiaisontoprovidetheSSACmembershipwithtwice-yearlystatusupdatesregardingprogressofSSACrecommendationsattheBoard.Internally,SSACwillconsideramethodofflagginginternallythehighpriorityorurgentrecommendationsandworkthisthroughtheBTC.


Significantefforthasbeendevotedwithinthepastyeartoreviewingtherelevance,currencyandimplementationstateofalladvicetotheICANNBoard.InOctober2019theSSACBoardLiaisonandSSACmembersworkedwithICANNOrgstafftoreviewallopenitemsonAAR;haveprovidedupdatesandquestionsregardingthem.AnupdateregardingthestatusofalladvicewasprovidedtotheSSACbytheSSACBoardLiaisonatICANN66inMontreal.WorktoupdateOperationalProcedurespertheaboveiscurrentlyunderway;thiswillprovideforongoingreviews.UpdateaspartofthisDetailedImplementationPlan(June2020):

Complete–Section3.5ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedtoread:“TheSSACBoardLiaison,inconjunctionwiththeSSACSupportStaffandSSACAdminCommittee,willactivelyreviewtheimplementationstateofalladvicetotheICANNBoard,ensuringthatallactionitemsarelistedintheARRinaccordancewiththeBoardResolution.ForanyaspectsofactionitemsthatcannotberesolvedbycommunicationwiththeICANNOrganization,theSSACBoardLiaisonwillfollow-upwiththeICANNBoardwhenadvicehasnotyetbeenaddressedorwhenprogressisunclear.”Nofurtherimplementationrequired.


Recommendation6

Recommendation Fortimesensitiveissues,theSSACshouldestablishprocessandworkdeadlinesthattakeintoaccountthedecisiontimelinesofotherICANNentities.TheSSACshouldworkwithSSACstafftoensureinternaldeadlinesaresetuptomakemeetingexternaldeadlinesaspossibleasreasonable.


SSACalreadyendeavorstodothis.Forexample,SSAChasbeenprovidingtimelywrittencommentsduringPublicCommentPeriods,whichisthemaincommunity-standardwaytoprovidefeedback.SSAChasalsoprovidedefficientandtimelyparticipationintherecentanddemandingePDP.SSACwillnotalwaysbeabletoformallyjoinsomecommunityeffortsduetotime/laborconstraints--pleaseseealsonotesregardingRecommendations14and15below.






AccordingtoFAIIP:None(althoughtakesupalotofSSACmember/volunteertime.)UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:None.RequirescontinuedhelpofSSACsupportstaff.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:MediumUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:CommunityparticipationMediumUpdateaspartofthisDetailedImplementationPlan:

HowsoonaftertheBoardacceptance AccordingtoFAIIP:Shortlythereafter

ofthedetailedimplementationplancantheimplementationstart?



done


AccordingtoFAIIP:SSACAdminCommitteetomonitorandmanageaspartofongoingoperations.UpdateaspartofthisDetailedImplementationPlan(June2020):Complete–SSACAdminCommitteemonitorsalltaskswithworkdeadlinesandsetsinternaldeadlinesthatenableexternaldeadlinestobemet.Nofurtherimplementationrequired.


SeeHigh-levelimplementationstepsabove


Recommendation8

Recommendation TheSSACshouldformalizeanannualprocessgearedtowardssettingresearchprioritiesandidentifyingrelevantemergingsecurity,stability,andresiliency(SSR)threatsintheshortandmedium-term.


SSACdoesthisaspartofitsannualworkshop,wherethemembershipconvenestodoitsannualplanning.




AccordingtoFAIIP:SSACannualworkshopUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ContinuanceofSSACannualworkshopUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ContinuanceofSSACannualworkshopUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:EasytoimplementUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:Improvedservicetocommunity



AccordingtoFAIIP:AlreadyunderwayUpdateaspartofthisDetailedImplementationPlan:




AccordingtoFAIIP:Improvedservicetocommunity






AccordingtoFAIIP:TheSSACwillmemorializeitsannualprocessgearedtowardssettingresearchprioritiesandidentifyingrelevantemergingsecurity,stability,andresiliency(SSR)threatsintheshort-andmedium-term,intheOperationalProceduressection4.


TheSSAChasmemorializeditsannualprocessgearedtowardssettingresearchprioritiesandidentifyingrelevantemergingsecurity,stability,andresiliency(SSR)threats,andisformallyincorporatingintotheOperationalProceduressection4.AtSeptember2019SSACWorkshop,SSACexecutedthenewprocessandspentnotabletimeonit.Thisresultedinadocumentcontainingthreatcategorizationsandresearchprioritiesforthecomingyear.UpdateaspartofthisDetailedImplementationPlan(June2020):Complete–ThefirstparagraphofSection3.1ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedtoread:“In2019,theSSACundertookadetailedenvironmentalscantoidentifySSRthreats.TheriskanalysisflowingfromtheenvironmentalscanwillprovideaprioritizedlistoftopicsforfutureSSACwork.In

subsequentyears,theSSACwillundertakeatitsannualWorkshopalightweightannualreviewoftheenvironmentalscanandriskanalysisgearedtowardsadjustingworkprioritiesandidentifyinganynewemergingSSRthreats.Amoresubstantialreviewwillbeundertakentriennially.”Nofurtherimplementationrequired.


Recommendation9

Recommendation TheskillsneededfortasksidentifiedintheSSAC’sannualprioritysettingandemergingthreatidentificationexerciseshouldfeedintotheSSAC’smembershipandrecruitmentprocesses.


n/a
















AccordingtoFAIIP:2020membershipreviewprocessUpdateaspartofthisDetailedImplementationPlan:

Whatistheanticipateddurationoftheimplementationeffortto

completion?Short:0-10monthsMedium:≤20monthsLong:≤30months


AccordingtoFAIIP:SSACwillupdateitsOperationalProceduressections2.3and2.5,sothatskillsneededfortasksidentifiedintheSSAC’sannualprioritysettingandemergingthreatidentificationexercisearefedintotheSSAC’smembershipprocessesandaretakenintoaccountthere.


UpdatetoOperationalProceduresdraftedandunderway.AttheSeptember2019SSACWorkshop,theSSACperformedworkperRecommendation8andmappedskillsofcurrentmembershipandrequiredskillstotheresearchpriorities.InDecember2019theSSACanditsMembershipCommitteeidentifiedsomeresultingskillsitwishestobolsterinits2020membershipcycle.UpdateaspartofthisDetailedImplementationPlan(June2020):Inprogress–ThefollowingsentencewasaddedtothefirstparagraphofSection2.3ofSSACOperationalProceduresv8issuedon12February2020:“TheMembershipCommitteeisguidedinitsselectionofnewmembersbytheoutcomesoftheSSACannualprocesstoreviewSSRthreatsandupdateitsplannedfuturework,fromwhichadeterminationofskillsneedswillbederived.TheCommitteewillbefurtherguidedbyconsiderationofdesireddiversityattributesasadvisedbytheSSACAdministrativeCommitteeafterconsultationwithallSSACmembers.”AfterreviewingthetextofSection2.5oftheSSACOperationalProcedures,itwasdecidedthatnoamendmenttotheproceduresrelatingtoAnnualMemberReviewwasrequired.TheSSACSkillsSurveyhasundergonesignificantreviewandrewritetosimplifytheformatbutalsotobetterorganize,clarifyandupdatetheskillslist.Ithasalsoincorporatedsomequestionstocollectnon-technicalskillsanddemographicdatatoassesstheSSAC’sdiversityinthoseaspects.AllSSACMemberscompletedthenewskills

surveyinFebruary2020andthisinformationhasbeencollatedandisbeingusedbytheAdminCommitteeto:- Develop,withthesupportoftheICANN

CommunicationsTeam,outreachmaterialsforrecruitmentofnewmembers,

- Develop,withthesupportoftheICANNCommunicationsTeam,appropriatemessagingforinclusionontheSSACpublicwebsite,and

- IdentifyskillsinexistingSSACMembersforproposednewWorkPartytopics.

UpdateaspartofthisDetailedImplementationPlan(December2020):Complete–TheSSACOperationalProcedureshavebeenupdatedandissued(v8.0).TheSSACSkillsSurveyhasbeenupdated,implementedandisnowavailableontheSSACpublicwebsite.MessagingregardingSSACskillsneedshasbeendevelopedandsharedatSSACPublicMeetingsduringICANN68and69.TheSSACAdminCommitteecontinuestoworkwiththeICANNCommunicationsTeamtodevelopandrefinemessagingforoutreach.TheSSACAdminCommitteereviewsitsworkplanannuallyanddevelopsguidancefromthatprocesstoinformtheMembershipCommitteeregardingskillsneeds.AlltheseactionsarereflectedinSSACOperationalProceduresandwillcontinueaspartofongoingSSACactivities.


Recommendation10

Recommendation TheSSACshouldexplicitlycommunicatethereasonsforitsdecisionsaroundtopicselectionandfocuswithothersinICANN.Newrequestsshouldbecomparedtothecurrentsetofprioritiesandcommunicatedaboutaccordingly.


SSACalreadydoesthisinitspublicmeetingsatthethrice-ayearICANNmeetings.Wewilllooktowaystosharpenourmessageregardingourmotivationsforselectingparticularworkproducts.












AccordingtoFAIIP:ImprovedcommunicationsEasyUpdateaspartofthisDetailedImplementationPlan:






Seebelow


AccordingtoFAIIP:SSACAdminCommitteewilllooktowaystosharpenourmessageregardingprojectselection.


SSACAdminCommitteehasbeenworkingwithICANNOrgcommunicationsstaffaboutmessaging,andtheyarefindingspecificadditionalwaystocommunicateaboutSSACprojectselectionandworkproducts.UpdateaspartofthisDetailedImplementationPlan(June2020):Inprogress–TheSSACAdminCommitteeisworkingwiththeICANNCommunicationsTeamtodevelopappropriatemessaging.UpdateaspartofthisDetailedImplementationPlan(December2020):Complete-TheSSACaimstoconductalightweightannualreviewoftheenvironmentalscanandriskanalysisgearedtowardsadjustingworkprioritiesandidentifyinganynewemergingSSRthreats,asdocumentedinSSACOperationalProceduresv8.0Section3.1.SSACdecisionsonworkprioritiesareinformedbythis,aswellasbeingdrivenbytheneedtoparticipateincross-communityeffortssuchastheEPDP,theneedtorespondtoICANNPublicCommentswhichhaveanSSRdimension,andissuesthatmayarisefromconsiderationofOCTOpapers.AllsuchfactorsaretakenintoaccountindeterminingtheAnnualSSACWorkPlanandthesearecommunicatedinallpublicmeetingswhereSSACbriefsonitsworkpriorities.

Detailedimplementationcosting n/a;needsparticipationofICANNOrgcommsstaff.

Recommendation11

Recommendation TheSSACshouldcontinuetoapproachtheICANNBoardwhenadditionalfunding,resources,oraccesstoexternalcontractorsmayberequiredtoachieveaprojectinthedesiredtimelineoratthedesiredscale.


Willdo.Anexampleinthepastwasthelarger-than-usualNCAPproject,whereSSACscopedandrequestedadditionalresources.TheIE’srecommendationassumesthattherewillbenounfundedmandatestoSSACfromtheBoardorthecommunity.






AccordingtoFAIIP:N/AUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:Seeabove.UpdateaspartofthisDetailedImplementationPlan:




AccordingtoFAIIP:Efficientprocess.EasyUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:AsneededUpdateaspartofthisDetailedImplementationPlan:




AccordingtoFAIIP:SSACAdminCommitteeisresponsiblefortrackingandcoordinatingrequestsofthisnature.


Willbeexecutedifandwhenneeded.



Detailedimplementationcosting TBDdependingonfuturerequests.

Recommendation12

Recommendation TheSSACshouldconsiderwhetherafellowshipcanbeusedforassistancewithresearchorspecificworkproducts.Inaddition,theSSACshouldcontinuetoendeavortoleveragetheassistanceofICANN’stechnicalstaffwhenitisappropriatetodoso.


TheproblemthattheIEistryingtohelpsolveisgettingmoreresourcesforSSAC,whichisstretchedtocapacity.InApril2019,ICANNOrgsecuredtwoResearchFellowstosupportprojectsinSSACandRSSAC.TheICANNResearchFellowProgramisapiloteffortdesignedtoengagesecurityandtechnicalresearcherstoworkonemergingsecurityandtechnologypolicyissuesrelatedtotheDNS.TheResearchFellowswillhelpfilltheneedexpressedbytheIE.SSACneedstheassistanceofpeoplewithwritingskillswhocanhelpwiththedraftingofSSACpapersunderSSACdirection.


AccordingtoFAIIP:SSACandICANNStaffUpdateaspartofthisDetailedImplementationPlan:




AccordingtoFAIIP:ResearchFellowfundingfromICANNOrg.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ResearchFellowfundingfromICANNOrg.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:HardUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:Efficiencydelivery,relievesomeburdenbeingimposedonSSACvolunteersUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ImmediatelyUpdateaspartofthisDetailedImplementationPlan:



AccordingtoFAIIP:SSACAdminCommitteeandICANNstaffcollaboratedtofilltheResearchFellowpositionallowedunderthebudget;implementationcompletedApril2019andplannedtocontinueinfutureyears.


Perhigh-levelimplementationsteps,SSAChasobtainedResearchFellowassistance,andwillmaintainit;ResearchFellowsarecurrentlyengagedinSSACwork.


Complete–nofurtherimplementationrequired

Detailedimplementationcosting CostofSSACFellowsisinICANNbudget;thatbudgetitemneedstobeprovidedforyearly.

Recommendation14

Recommendation TheSSACshouldconsiderandadoptappropriatemechanismstoensurethatitisawareofpolicy-makingeffortsgoingonwithinICANN.


TheSSACinvitesotherSOsandACstocontactSSACiftheywouldlikeSSAC’sopiniononanupcomingmatter.Proactivecommunicationisalwaysappreciated,andSSACwillendeavortorespondtorequeststothebestofitsability.SSACtrackspolicy-making,andwhenitseesanissuewithsecurityandstabilityimplications,SSACcommentsduringthepubliccommentperiods.Thepubliccommentperiodsaretheofficiallydesignatedtimeswhenpolicy-makinggroupssolicitfeedbackfromthecommunity,supposedlywithenoughtimetodigestthecommentsandadjustcourseasnecessary.Ifpubliccommentperiodsfalltoolateintheprocess,thenthatisanissuefortheGNSOandICANNOrgtosolve.SSACtakesadvantagewhenSSACmembersareparticipatinginpolicy-makinggroups,pertheirowninterests,theiremployer’s,oronbehalfofanothergroup.ThesemembersbringbackitemsfordiscussionwithinSSAC.TheSSACChairmeetsregularlywiththeGNSOChairandotherSO/ACleaders.Newandupcomingpolicyinitiativescouldbeatopicinthoseleadershipmeetings.


AccordingtoFAIIP:SSAC,otherbodieswithICANN










Howwouldyouassessthepotential AccordingtoFAIIP:

benefitoftheimplementationofthisrecommendationforICANNasawhole?Pleaseconsider:improvedBoardGovernance,moreefficientprocess,greaterNomComaccountabilityandtransparency,etc.(high,medium,low)

ImprovedcommunityprocessMediumUpdateaspartofthisDetailedImplementationPlan:




ongoing




n/aasabove



Detailedimplementationcosting Significantvolunteertimecost.RequirescontinuedSSACtravelsupporttoICANNmeetings,atleastthecurrentlevels.

Recommendation15

Recommendation Astimeavailabilityallows,theSSACshouldcontinuetohavemembersinvolvedasindividualsinlarge,cross-ICANNeffortsthathaveSSR-relatedcomponents,suchastheSSR2.


ICANN’sincreasingnumberofcross-communityeffortsallrequirelargetimecommitments.Somecross-communityeffortsareimportantforSSACtoparticipatein,andSSACwillcontinuetoparticipatetotheextentthetopicsarealignedwithSSAC’smissionandcapabilities.SomeofthoserelevanteffortshaveplacedsignificantburdensonSSACanditsmembers.



















FYI:Astimeavailabilityallows,theSSACwillcontinuetohavemembersinvolvedasindividualsinlarge,cross-ICANNeffortsthathaveSSR-relatedcomponents,suchastheSSR2.



Detailedimplementationcosting Significantvolunteertimecost.RequirescontinuedSSACtravelsupporttoICANNmeetings,atleastthecurrentlevels.

Recommendation16

Recommendation IntheprocessofdevelopingeachSAC-seriesdocument,theSSACshouldexplicitlydiscusswhoaffectedpartiesmaybeandwhetherornotaffectedpartiesshouldbeconsultedforfeedbackorshouldbenotifiedthattheSSACplanstopublishadocumentonagiventopic.


SSACalreadydoesthis,perSSACOperationalProceduressections3.2.3and3.2.4.












AccordingtoFAIIP:ImprovedprocessMediumUpdateaspartofthisDetailedImplementationPlan:







AccordingtoFAIIP:TheSSACOperationalProceduressection3.2.3,“DevelopinganInitialWorkDraftProduct”,willbeupdatedtoread:“Theworkpartyshouldidentifythepartiespotentiallyaffected,andmayconsultwithmembersoftheICANNcommunityaffectedbytheissueunderstudy."


UpdatetoOperationalProceduresunderwayasperabove.


Complete–ThefirstsentenceofSection3.2.4ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedtoread:“OncetheSSAChasapprovedaninitialdraftworkproduct,thenextstepistoidentifyaffectedpartiesintheICANNcommunityand,iftheworkpartydeemsitnecessary,toengagetheminapreliminaryreviewornotifythemthattheSSACplanstopublishadocumentonagiventopic.”


Recommendation18

Recommendation TheSSACshouldpostspecificadditionalmaterialsonlineintheshort-term,toconsolidateinformationandincreasetransparency.TheSSAC’sAdministrativeCommitteeshouldthenundertakeayearlyreviewoftheSSAC’swebsitetodeterminewhetheradditionalcontentshouldbeprovidedorwhetherthewebsiteshouldberestructured.


AfterconsultingwiththeAdminCommittee,plansareunderwaytoincorporatethisrecommendationbyaddingthefollowingtotheSSACwebsite.• AnexplanationofthepurposeoftheSSAC-CorrespondenceSeries.• AlinktothemostrecentICANNBoardARR.• AcleararticulationofhowandwhenanSO/ACorWorkPartywithinICANNmightrequestfeedbackorcommentsfromtheSSAC• AclearexplanationofhowonecanapplytojointheSSACandhigh-levelinformationregardingthetypesofskillsthattheSSACislookingforinmembers.• Picturesofcurrentmemberswhoarewillingtoincludeone,toassistnewermembersofICANN


AccordingtoFAIIP:SSACAdminCommitteeandsupportstaffUpdateaspartofthisDetailedImplementationPlan:















AccordingtoFAIIP:SSACAdminCommitteetoleadeffortstoimprovethecontentoftheSSACWebsite.


SSACAdminCommitteetoconsultwithsupportstaffandcreateaplanbyendofFebruary2020toimprovethecontentpertheabove.SeealsoRecommendation24.UpdateaspartofthisDetailedImplementationPlan(June20):Inprogress–TheSSACAdminCommitteeworkedwiththeICANNSupportStaffandWebSupportStafftodevelopappropriatewordingforthepublicwebsite.UpdatestothecurrentwebsitehavebeendevelopedandsubmittedbuthavenotyetbeenpostedbytheWebSupportStaff.WebelieveworkonthisefforthasbeendelayedbyotherprioritiesoftheWebSupportStaff.UpdateaspartofthisDetailedImplementationPlan(December20):Complete-RequestedupdatestothecurrentSSACwebsitewereimplementedbyICANNWebSupportStaffinlateSep/earlyOct• AnexplanationofthepurposeoftheSSAC-CorrespondenceSeries–DONE:ThepurposeofeachtypeofdocumentisnowexplainedonthemainSSACwebpageundertheheading“HowdoesSSACdocumentitswork?”Itisalsodescribedatthetopofthepageswheredocumentsareposted.• AlinktothemostrecentICANNBoardARR–DONE:ThereisalinktotheBoardARRundertheheading“HowdoesSSACdocumentitswork?”onthemainSSACwebpage.• AcleararticulationofhowandwhenanSO/ACorWorkPartywithinICANNmightrequestfeedbackorcommentsfromtheSSAC–DONE:Thisiscoveredinthelastsentenceincludedundertheheading“Howdoesthe

SSACOperate?”onthemainSSACwebpage.• AclearexplanationofhowonecanapplytojointheSSACandhigh-levelinformationregardingthetypesofskillsthattheSSACislookingforinmembers–DONE:ThemainSSACwebpagenowcontainsalinktotheSSACSkillsSurveyundertheheading“HowdoIparticipateintheSSAC?”,aswellasspecificdirectiontotherelevantsectionofthelinkedSSACOperationalProceduresandtheemailcontactforSSACSupportStaff.• Picturesofcurrentmemberswhoarewillingtoincludeone,toassistnewermembersofICANN–NOTYETDONE:TheSSACAdminCommitteeisdiscussingwiththeICANNWebSupportStaffhowthismightbeachievedafterthenewSSACwebsiteisimplementedinapproximatelyApril2021.SinceallactionshavebeencompletewiththeexceptionofthephotographsofSSACmembersontheSSACpublicwebsite,werecommendthatimplementationofthisrecommendationcanbeconsideredasCOMPLETE.

Detailedimplementationcosting TBD.MayrequireatleastarevampoftheSSACsectionoftheICANNwebsite.AllotherSOsandACs(exceptRSSAC)havefull,dedicatedwebsitestosupportcontentandeffectivecommunications,andSSACmayneedsupporttocreateandmaintainsomethingsimilar.

Recommendation19

Recommendation TheSSACshouldremainaccountabledirectlytotheICANNBoardandthroughittothewiderICANNcommunity.


None


AccordingtoFAIIP:ICANNBoard,SSACUpdateaspartofthisDetailedImplementationPlan:










AccordingtoFAIIP:NonewimplementationneededUpdateaspartofthisDetailedImplementationPlan:





n/a


AccordingtoFAIIP:N/A





Recommendation20

Recommendation ThecurrentnumberofSSACmembersisappropriate.TheSSACshouldcontinuetoworktoensureitsmembersareengaged,inconjunctionwiththerecruitingpointsmadebelow.


None










AccordingtoFAIIP:Medium,requiresworkbyMembershipCommittee



AccordingtoFAIIP:GreatermembershipengagementHighpriority,forproductivityUpdateaspartofthisDetailedImplementationPlan:



Whatistheanticipateddurationoftheimplementationefforttocompletion?Short:0-10monthsMedium:≤20months

n/a

Long:≤30months


AccordingtoFAIIP:Continuetofollowmembershipparticipationandevaluationprocedures,perSSACOperationalProcedures.



Complete–nospecificimplementationrequired


Recommendation24

Recommendation Eachyear,theSSACshoulddevelopaformalizedprocesstoestimatethenon-technicalexpertiserequiredforanticipatedfutureworkandtherebyidentifyanyskillsgapsinthecurrentmembership.TheseskillsgapsshouldbewidelypublicizedontheSSACwebsiteandatanymeetingswhereSSACmembersareinattendance.Prospectivecandidatesshouldbedirectedtoreviewthepublishedskillsgaps.TheMembershipCommitteeshouldtakenon-technicalexpertisegapsintoconsiderationwhenassessingnewmemberapplications.


None


AccordingtoFAIIP:SSAC,atitsAnnualWorkshop.SSACMembershipCommitteeinconsideringnewmemberapplicationsUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:InconjunctionwiththeannualassessmentofnewworkconductedattheSSACAnnualWorkshop,identifythenon-technicalskillsrequiredtoundertakeanticipatedfutureworkandtheskillsgapsthatmayneedtobefilledtodoso.ThisactivityisalsocoveredbyRecommendations8and9andisrelatedtoRecommendations21and25.UpdateaspartofthisDetailedImplementationPlan:






AccordingtoFAIIP:Highpriority,forproductivityMedium;requiresworkbyallSSACmembers


HowwouldyouassessthepotentialbenefitoftheimplementationofthisrecommendationforICANNasawhole?Pleaseconsider:improvedBoardGovernance,moreefficientprocess,greaterNomCom

AccordingtoFAIIP:Medium.Greatermembershipengagement,moreefficientmembershipapplicationprocess,SSACnon-technicalexpertisecloselyalignedtotheworkanticipatedtobeundertaken.UpdateaspartofthisDetailedImplementationPlan:

accountabilityandtransparency,etc.(high,medium,low)





AccordingtoFAIIP:AspartoftheannualassessmentofnewworkconductedattheSSACAnnualWorkshop,identifythenon-technicalexpertiserequiredtoundertakeanticipatedfuturework.Identifyskillsgapsthatmayneedtobefilledtodoso.PublicizeskillsgapsontheSSACwebsiteandatanymeetingswhereSSACmembersareinattendance.Takenon-technicalexpertisegapsintoconsiderationwhenassessingnewmemberapplications.


SSACAdminCommitteeandSSACMembershipCommitteefolloweduponSeptember2019SSACWorkshopbyidentifyingthenon-technicalexpertiserequiredtoundertakeanticipatedfuturework.SSACAdminCommitteetocreateaplanbyendofFebruary2020topublicizeskillsgapsontheSSACwebsiteandatanymeetingswhereSSACmembersareinattendance.SSACtoupdateSSACOperationalProceduressection2.3totakenon-technicalexpertisegapsintoconsiderationwhenassessingnewmemberapplications.WorkrequiredtoupdateSSACwebsitetobebundledwithworkinRecommendation18.UpdateaspartofthisDetailedImplementationPlan(June2020):

Inprogress–

ThefollowingsentencehasbeenaddedtothefirstparagraphofSection2.3ofSSACOperationalProceduresv8issuedon12February2020:“TheMembershipCommitteeisguidedinitsselectionofnewmembersbytheoutcomesoftheSSACannualprocesstoreviewSSRthreatsandupdateitsplannedfuturework,fromwhichadeterminationofskillsneedswillbederived.TheCommitteewillbefurtherguidedbyconsiderationofdesireddiversityattributesasadvisedbytheSSACAdministrativeCommitteeafterconsultationwithallSSACmembers.”TheSSACSkillsSurveyhasundergonesignificantreviewandrewritetosimplifytheformatbutalsotobetterorganize,clarifyandupdatetheskillslist.Ithasalsoincorporatedsome

questionstocollectnon-technicalskillsanddemographicdatatoassesstheSSAC’sdiversityinthoseaspects.AllSSACMemberscompletedthenewskillssurveyinFebruary2020andthisinformationhasbeencollatedandisbeingusedbytheAdminCommitteeto:- Develop,withthesupportoftheICANN




OutreacheffortsthatwereplannedtocommenceatICANN67havebeenhinderedbythelackofface-to-faceopportunitiesduetotheCOVID-19cancellationsofICANNmeetings.CollaborationwiththeICANNCommunicationsTeamtodiscussalternativeapproachesifface-to-facemeetingscontinuetobecancelledinto2021.UpdateaspartofthisDetailedImplementationPlan(December2020):Complete–TheSSACOperationalProcedureshavebeenupdatedandissued(v8.0).TheSSACSkillsSurveyhasbeenupdated,implementedandisnowavailableontheSSACpublicwebsite.MessagingregardingSSACskillsneedshasbeendevelopedandsharedatSSACPublicMeetingsduringICANN68and69.TheSSACAdminCommitteecontinuestoworkwiththeICANNCommunicationsTeamtodevelopandrefinemessagingforoutreach.TheSSACAdminCommitteereviewsitsworkplanannuallyanddevelopsguidancefromthatprocesstoinformtheMembershipCommitteeregardingbothtechnicalandnon-technicalskillsneeds.AlltheseactionsarereflectedinSSACOperationalProceduresandwillcontinueaspartofongoingSSACactivities.Outreacheffortscontinuetobehinderedbythelackofface-to-faceopportunitiesduetotheCOVID-19cancellationsofICANNmeetings.Withdifferentrestrictionsindifferentpartsoftheworld,theSSACwillapproachICANNregionalstafftoassistwithoutreach,especiallyduringthisperiod,butalsoonanongoingbasis.Adaptationofoutreacheffortswillbeafactoroflifeforsometimetocome,werecommendthatimplementationofthisrecommendationcanbeconsideredasCOMPLETE.


Recommendation25

Recommendation Eachyear,theSSACshoulddevelopaformalizedprocesstoestimateitscurrentanddesireddiversity,includingbutnotlimitedtogeographyandgender,andtherebyidentifyanydiversitygapsinthecurrentmembership.ThesediversitygapsshouldbewidelypublicizedontheSSACwebsiteandatanymeetingswhereSSACmembersareinattendance.Prospectivecandidatesshouldbedirectedtoreviewthepublishedskillsgaps.TheMembershipCommitteeshouldtakediversitygapsintoconsiderationwhenassessingnewmemberapplications.


N/A


AccordingtoFAIIP:SSACatitsAnnualWorkshopSSACMembershipCommitteeinconsideringnewmemberapplicationsUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:InconjunctionwiththeannualassessmentofnewworkconductedattheSSACAnnualWorkshop,identifythecurrentanddesireddiversity,includingbutnotlimitedtogeographyandgender,ofitsmemberstocontributetohighqualityofSSACadvice.Identifythediversitygapsthatmayneedtobefilledtodoso.ThisactivityisalsocoveredbyRecommendations8and9andisrelatedtoRecommendations21and24.UpdateaspartofthisDetailedImplementationPlan:






AccordingtoFAIIP:Difficultytoimplement:High,forproductivityLevelofimplementationeffort:Medium;requiresworkbyallSSACmembersUpdateaspartofthisDetailedImplementationPlan:

HowwouldyouassessthepotentialbenefitoftheimplementationofthisrecommendationforICANNasa

AccordingtoFAIIP:Medium.Greatermembershipengagement,moreefficientmembershipapplicationprocess,increasedSSACdiversity

whole?Pleaseconsider:improvedBoardGovernance,moreefficientprocess,greaterNomComaccountabilityandtransparency,etc.(high,medium,low)

contributingtohigherqualityofSSACadvice.






AccordingtoFAIIP:AspartoftheannualassessmentofthediversityofitsmembersconductedattheSSACAnnualWorkshop,identifythedesireddiversity,includingbutnotlimitedtogeographyandgender,ofitsmemberstocontributetohighqualityofSSACadvice.Identifydiversitygapsthatmayneedtobefilledtodoso.PublicizediversitygapsontheSSACwebsiteandatanymeetingswhereSSACmembersareinattendance.Takediversitygapsintoconsiderationwhenassessingnewmemberapplications.


TaskoftakingdiversitygapsintoconsiderationwhenassessingnewmemberapplicationsisincorporatedinSSACOperationalProceduressection2.3.SSACwillupdateitsOperationalProceduressection3.1toincorporateanannualassessmentofthediversityofitsmemberstobeconductedattheSSACAnnualWorkshop,andidentifythedesireddiversityandgaps,includingbutnotlimitedtogeographyandgender.Inallannualmembershipcycles,SSACAdminCommitteeandSSACMembershipCommitteetoidentifydiversitygapsthatmayneedtobefilled;SSACtodiscussateachannualSSACworkshop.AdminCommitteewillberesponsibleforpublicizingdiversitygapsontheSSACwebsite,andcreateplanforpublicizingatanymeetingswhereSSACmembersareinattendance.UpdateaspartofthisDetailedImplementationPlan(June2020):

Inprogress–

ThefollowingsentencehasbeenaddedtothefirstparagraphofSection2.3ofSSACOperationalProceduresv8issuedon12February2020:“TheMembershipCommitteeisguidedinitsselectionofnewmembersbytheoutcomesoftheSSACannual

processtoreviewSSRthreatsandupdateitsplannedfuturework,fromwhichadeterminationofskillsneedswillbederived.TheCommitteewillbefurtherguidedbyconsiderationofdesireddiversityattributesasadvisedbytheSSACAdministrativeCommitteeafterconsultationwithallSSACmembers.”TheSSACSkillsSurveyhasundergonesignificantreviewandrewritetosimplifytheformatbutalsotobetterorganize,clarifyandupdatetheskillslist.Ithasalsoincorporatedsomequestionstocollectnon-technicalskillsanddemographicdatatoassesstheSSAC’sdiversityinthoseaspects.AllSSACMemberscompletedthenewskillssurveyinFebruary2020andthisinformationhasbeencollatedandisbeingusedbytheAdminCommitteeto:- Develop,withthesupportoftheICANN




OutreacheffortsthatwereplannedtocommenceatICANN67havebeenhinderedbythelackofface-to-faceopportunities.CollaborationwiththeICANNCommunicationsTeamtodiscussalternativeapproachesinthecurrentsituationcontinues.UpdateaspartofthisDetailedImplementationPlan(December2020):Complete–TheSSACOperationalProcedureshavebeenupdatedandissued(v8.0).TheSSACSkillsSurveyhasbeenupdated,implementedandisnowavailableontheSSACpublicwebsite.MessagingregardingSSACskillsanddiversityneedshasbeendevelopedandsharedatSSACPublicMeetingsduringICANN68and69.TheSSACAdminCommitteecontinuestoworkwiththeICANNCommunicationsTeamtodevelopandrefinemessagingforoutreach.TheSSACAdminCommitteereviewsitsworkplanannuallyanddevelopsguidancefromthatprocesstoinformtheMembershipCommitteeregardingbothtechnicalandnon-technicalskillsaswellasdiversityneeds.AlltheseactionsarereflectedinSSACOperationalProceduresandwillcontinueaspartofongoingSSACactivities.Outreacheffortscontinuetobehinderedbythelackofface-to-faceopportunitiesduetotheCOVID-19cancellationsofICANNmeetings.Withdifferentrestrictionsindifferentpartsoftheworld,theSSACwillapproachICANNregionalstafftoassistwithoutreach,especiallyduringthisperiod,butalsoonanongoingbasis.Adaptationofoutreacheffortswillbeafactoroflifeforsometimetocome,werecommendthatimplementationofthis

recommendationcanbeconsideredasCOMPLETE


Recommendation26

Recommendation TheSSACshouldensurethattheeffectivenessofanexternalliaisonandtheindividualintherolearereviewedonaregularbasis,andthatameansofprovidingconfidentialfeedbacktothereviewisreadilyavailableandknown.


SSACbelievesithasprocessesinplacetomitigatetheconcernbeingraised.WewillseektoreviseourOperationalProcedurestomakethismoreapparent.TheICANNBoardutilizesaformalmechanisminwhichBoardmembersprovidefeedbacktootherBoardmembers.SowhiletheSSACLiaisonreceivesfeedbackabouthisorhereffectivenessontheBoardfromotherBoardmembers,theSSAChasnomechanismforprovidingfeedbacktoitsownLiaison.












AccordingtoFAIIP:Improvedmanagement,accountabilityLowUpdateaspartofthisDetailedImplementationPlan:

HowsoonaftertheBoardacceptanceofthedetailedimplementationplan

AccordingtoFAIIP:Immediately

cantheimplementationstart? UpdateaspartofthisDetailedImplementationPlan:



AccordingtoFAIIP:AdditionaltextwillbedraftedandproposedfortheSSACOperationalProceduresduringthenextrevisioncycle.


SSACAdminCommitteetoproposelanguageforupdatetoOperationalProceduresbyendofFebruary2020UpdateaspartofthisDetailedImplementationPlan(June2020):Complete–ThefollowingnewparagraphhasbeenaddedtoSection2.8.3ofSSACOperationalProceduresv8issuedon12 February 2020: “Prior to the appointment orreappointment of an SSAC outward liaison or other SSACrepresentative,theSSACAdministrativeCommitteeshouldundertakeaninformalreviewofthebenefitsandoutcomesof participation in each role and recommend to the SSACwhetherthatroleshouldcontinuetobefilled.”

Detailedimplementationcosting

Recommendation27

Recommendation TheSSAC’sleadershipshouldbelimitedtotwo,three-yearterms.TheSSACshouldimposenotermlimitsonnon-leadershipmembers.


See#28forimplementationregardingSSACChair.TheSSACVice-ChairandBoardLiaisonarealreadyterm-limitedtotwothree-yearterms,viatheSSACOperationalProcedures.


AccordingtoFAIIP:See#28UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:See#28UpdateaspartofthisDetailedImplementationPlan:








AccordingtoFAIIP:ImprovedgovernanceandaccountabilityLowUpdateaspartofthisDetailedImplementationPlan:




Withinthreemonths



AccordingtoFAIIP:See#28forimplementation


InDecember2019,SSACmembershipvotedtoamendtheSSACOperationalProceduresthusly:“TheChairwillbeelectedtoathree-yeartermofofficeandcanservefortwoconsecutivethree-yearterms.Morethantwoconsecutivetermsareallowed,butshouldbeconsideredexceptional.HavingthesamepersonreturnasChairafterarelativelyshortbreakshouldsimilarlybeconsideredexceptional.”UpdateaspartofthisDetailedImplementationPlan(June2020):Complete–Section2.8.1ofSSACOperationalProceduresv8issuedon12February2020hasbeenamendedtoincorporatetheabovetext.


Recommendation28

Recommendation TheSSACshouldworkwiththeICANNBoardtoupdatetheICANNBylawsinordertoallowfortheretobetermlimitsontheSSACChair.


SSACistheonlySOorACthatisnotallowedtoterm-limititschair.AllotherSOsandACsareallowedtodecidebothtermlengthsandtermlimitsfortheirleadershippositions,andhavechosentoimposebothtermlengthsandtermlimits.(ExcepttheGNSO,wheretheICANNBylawsthemselvesdictatetermlengthsandtermlimitsforGNSOCounsellorsandtheGNSOChair.)TheICANNBoard,PTI,etc.alsohavetermslimits.TheamendmenthasbeensubmittedforconsiderationinthenextconvenientroundofBylawsupdates.


AccordingtoFAIIP:ICANNBoardUpdateaspartofthisDetailedImplementationPlan:








AccordingtoFAIIP:TheamendmenthasbeensubmittedforconsiderationinthenextconvenientroundofBylawsupdates.UpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:ImprovedgovernanceandaccountabilityLowUpdateaspartofthisDetailedImplementationPlan:


AccordingtoFAIIP:Immediately




AccordingtoFAIIP:ICANNBoardmustupdateBylaws;SSACBoardLiaisontoworkwithBoardonnecessaryarrangements.TheamendmenthasbeensubmittedforconsiderationinthenextconvenientroundofBylawsupdates.



TherequiredupdatetotheICANNBylawsweremadeviaBoardResolution2019.05.03.13.UpdateaspartofthisDetailedImplementationPlan(June2020):

Complete–nofurtherimplementationrequired


Recommendation29

Recommendation TheSSACshouldmaintainitscurrentprocessesandactivitiesarounddisclosingpotentialconflictsofinterest,bothattheindividuallevelandasagroupofindividuals.Itshouldalsoupdateitsonlinedisclosureofintereststatementstoclearlyarticulatewhenthedisclosurewaslastsubmittedforeachmember.


None












AccordingtoFAIIP:ImprovedaccountabilityandtransparencyEasyUpdateaspartofthisDetailedImplementationPlan:






AccordingtoFAIIP:SSACwillupdateitsOperationalProcedurestomakesurethatonlinedisclosureofintereststatementsclearlystatewhenthedisclosurewaslastsubmittedforeachmember.UpdateaspartofthisDetailedImplementationPlan:


SSACwillupdateitsOperationalProcedurestomakesurethatonlinedisclosureofintereststatementsclearlystatewhenthedisclosurewaslastsubmittedforeachmember.UpdateaspartofthisDetailedImplementationPlan(June2020):Inprogress–Withonly2exceptions,allSSACMembersreviewedandupdatedtheirbiosanddisclosureofintereststatementsatthebeginningof2020andthesestatementswerepublishedasof26March2020ontheSSACwebsite.Goingforward,datesforindividualbiosanddisclosureofintereststatementswillbereflectedagainstthenamesofthoseindividuals.Otheraspectsformanagingconflictsofinterestandissuesofconfidentialityandnon-disclosureremainunchangedandarecoveredinthefollowingsectionsofSSACOperationalProceduresv8issuedon12February2020:Section2.1.2WithdrawalsandDissentsSection2.3NewMemberSelectionSection2.5AnnualReviewProcessSection2.6.1AffirmationofConfidentialityandNon-disclosureAppendixBAppendixFUpdateaspartofthisDetailedImplementationPlan(December2020):Complete–AllSSACMembersreviewedandupdatedtheirbiosanddisclosureofintereststatementsduring2020andthesestatementswerepublished,includingtheindividualsubmissiondatesforeachSSACmember,withthemostrecentupdatetotheSSACwebsiteinlateSep/earlyOct.


Recommendation30

Recommendation TheSSACshouldcontinuetonurtureandbuildupontheSSAC’sculturethatvaluesself-improvement,includingbetweenformalreviews.


N/A




AccordingtoFAIIP:TheSSACannualworkshop,andtravelsupportfor15SSACmemberstothethrice-yearlyICANNmeetings,areessentialtothisgoal.UpdateaspartofthisDetailedImplementationPlan:




AccordingtoFAIIP:TheSSACannualworkshop,andtravelsupportfor15SSACmemberstothethrice-yearlyICANNmeetings,areessentialtothisgoal.UpdateaspartofthisDetailedImplementationPlan:








ongoing

Subject: SSAC2020-13: SSAC Review Detailed Implementation ...

Documents

Transcript of Subject: SSAC2020-13: SSAC Review Detailed Implementation ...