Please Respond: Security Sections in ebXML Requirements Spec 1.04

[Mike Rawlins <mike@rawlinsecconsulting.com>]

QRT offered the following comment regarding this specification, which is
currently posted for public comment on the ebXML web site.

Security Requirements

Some of the requirements for security may not be reasonable (line
558-567) or specific enough (line 335) for conformance. We suggest this
material (mostly in section 6.5 (lines 534-601) should be ratified
against the risks identified in the Security Architecture Team’s Risk
Assessment document.

Section 6.5 Security – Archiving (lines 549-550)
Is it practical for a requirement to enable semantic reconstruction
where normal practice it is adequate to simply have access to the
document?

Please assess these comments and provide us with any suggested wording
changes by close of business, Thursday, April 27.  If no changes are
offered, this section will remain as written in the final version and we
will note in our comment disposition log that your team offered no
changes.

Thanks very much,

---------------------
Mike Rawlins, ebXML Work Group, Requirements Project Team Leader
http://www.ebxml.org/project_teams/requirements/private/