attachment-0001
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"
xmlns:ns1="http://schemas.microsoft.com/office/2004/12/omml">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--a:link
{mso-style-priority:99;}
span.MSOHYPERLINK
{mso-style-priority:99;}
a:visited
{mso-style-priority:99;}
span.MSOHYPERLINKFOLLOWED
{mso-style-priority:99;}
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:Calibri;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Calibri;
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Bill, <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I really like the document thus far.
It is getting a little long but could not exactly figure out how to shorten.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>In “Access Control According to User
Roles” (near the end) you use “MFP” while everywhere in the document
you use “Hardcopy Device”. I would suggest changing MPF to
HCD.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>In “Data Security” (second
sentence) you discuss “classified document”. The P2600
specifically does not address “classified documents”. I
would suggest changing “classified” to “confidentiality”.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Glen<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt;font-family:"Times New Roman"'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
mfd-bounces@pwg.org [mailto:mfd-bounces@pwg.org] <b><span style='font-weight:
bold'>On Behalf Of </span></b>William Wagner<br>
<b><span style='font-weight:bold'>Sent:</span></b> Sunday, January 30, 2011
3:31 PM<br>
<b><span style='font-weight:bold'>To:</span></b> wims@pwg.org; ids@pwg.org;
mfd@pwg.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> [MFD] MPSA Security
Article</span></font><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman"'><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>Greetings:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>There have been contributions and edits
to the draft MPSA user access article from Michael Sweet and Joe Murdock,
and constructive comments from others. I have incorporated the contributions,
with some edits, and reorganized the article a bit. Current version is at </span></font><font
size=4><span style='font-size:14.0pt'><a
href="ftp://ftp.pwg.org/pub/pwg/general/MPSA/Access_article_110130.doc">ftp://ftp.pwg.org/pub/pwg/general/MPSA/Access_article_110130.doc</a><font
color="#1f497d"><span style='color:#1F497D'>. <o:p></o:p></span></font></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>I suggest that the section on data
security (other than relating to access control) is not appropriate to this
article, although that is open to discussion. That area is highlighted, with
the intent of using it in some other article.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>There is more that should be in this one
though, and we have the survey questions to formulate. As Michael
observed, we also need to address our audience better…this is not a spec
and many of the terms that have very specific meanings to us may have different
meanings to a managed print services provider (such as service and job). We
will talk about this at the WIMS and IDS meetings next Thursday…but
comments on the mail lists would be appreciated.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>Many thanks,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'>Bill Wagner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color="#1f497d" face=Calibri><span
style='font-size:14.0pt;color:#1F497D'><o:p> </o:p></span></font></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> William Wagner
[mailto:wamwagner@comcast.net] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, January 17, 2011
1:45 PM<br>
<b><span style='font-weight:bold'>To:</span></b> wims@pwg.org; 'ids@pwg.org';
'mfd@pwg.org'<br>
<b><span style='font-weight:bold'>Subject:</span></b> MPSA Security Article<o:p></o:p></span></font></p>
</div>
</div>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'>Attached
(perhaps) and posted at is a skeleton draft of the February Access article for
the MPSA, preceded by the original outline. Most of the information is edited
from the MFD Model document security section by Nancy Chen (which was removed
in favor of a simple IEEE-2600 reference). The draft currently is incohesive,
incomplete, and non-compelling. I solicit contributions on Identification,
Authentication and Authorization, and on Logging, as well as comments on the
overall structure and intent of the article.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'>I
have agreed to edit and integrate contributions to provide a competed article
(although I would be willing to surrender that pleasure should someone else
volunteer.) It is our objective to get a reasonable article to Jim
Fitzpatrick for the February contribution. Although that suggests 28
January , depending upon how well the article takes shape, we may want to
discuss this at the February face-to-face and submit it by 3 February.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'>We
also need to consider the questions we wish to include in the associated
survey. The questions should be geared to helping us understand how MPSA
members see these security issues in their business, particularly with an aim
to what we might do to better satisfy their problems by informing them what is
available, by better documenting what might be done, and by making our PWG
member companies aware of the perceived problems and needs.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'>Many
thanks,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'>Bill
Wagner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face=Calibri><span style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt;font-family:"Times New Roman"'><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/"><b><span
style='font-weight:bold'>MailScanner</span></b></a>, and is <br>
believed to be clean. <o:p></o:p></span></font></p>
</div>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</body>
</html>