Re: SANS 18031

Hi Guys,

> The National Gazette No. 36666 (19 July 2013) standardizes some security techniques (cryptography related) as SANS 18031.  Has there been any change to that given that there is a possibility of one of the security techniques has a vulnerability?

The SABS has a well-defined system of Technical Committees (TC), below which are Sub-Committees (SC) and sometimes Working Groups (WG). They have recently changed the numbering of these, in order to comply with the numbering system used by the IEEE. It would appear that TC001/SC27 (was SC71F) deals with matters of Information Security. I am not a member of this one, although I am a member or Chair of several others.

Related to the numbering change, the SABS now has a well organised online system, where members can upload and download documents, as well as submit their comments on drafts. A vast improvement of the previous system of doing it all be mail. This is accessible here: -
https://nsb.iso.org/ecom/public/sabs/livelink?func=llworkspace

AFAIK, the SAIEE (who amongst you are members? Why not?) representatives in this Sub Committee are: -
L Staphorst	[email protected] 	and D Naidoo	[email protected]

According to the general spiel from the SABS (Attached), the SABS staff member to approach for details of when the next meetings are scheduled for is Ms Alexis Trollip [email protected] 012 428 6362. The attached document does a good job of explaining the basics. (Hmm, may be too big for the IOZ rules. If so, ask me directly and I'll send it to you)

In general terms, the SABS committees are open to individuals and organisations with an interest in the subject matter. One is expected to have some expertise There are two type of member: (P) participating members are obliged to comment on all matters, and may vote; and (O) Observer members may comment but may not vote. There is no charge for membership, but a duty of participation.

The gazette and SANS 18031 are available for download from here, for a fee: -
http://www.greengazette.co.za/pages/national-gazette-36666-of-19-july-2013-vol-577_20130719-GGN-36666-052
http://www.store.sabs.co.za/sans-18031-2013-ed-2-00

All gazettes are also available from the Government Printing Works, free of charge but requiring registration, IIRC. Finding stuff can be quite tricky
http://www.gpwonline.co.za/Pages/default.aspx

Of course, if you're a member of a SABS committee, the relevant standards, and drafts, are available to you free of charge. I can't provide them to you directly, as they are copyrighted.

Most of the IT related SABS groups are in the table below:
SABS New structure 			
Committee*		Status*	Title*							Old SABS Numbers
SABS/TC 001		Active	Information technology 					TC71
SABS/TC 001/SC 01	Active	Geographic information					SC71E
SABS/TC 001/SC 07	Active	ICT systems and software engineering				SC71C
SABS/TC 001/SC 02	Active	Intelligent transport systems					SC71H
SABS/TC 001/SC 03	Active	Accessibility to ICT for persons with disabilities and the elderly	SC71P
SABS/TC 001/SC 17	Active	Card and personal identification				SC71J
SABS/TC 001/SC 27	Active	Information security MS					SC71F
SABS/TC 001/SC 31	Active	Automatic identification and data capture techniques		SC71K
SABS/TC 001/SC 34	Active	Document description and processing languages		SC71L
SABS/TC 001/SC 38	Create	Cloud Computing						NEW
SABS/TC 001/SC 36	Active	Information technology for leaning, education and training	SC71N
SABS/TC 001/SC 37	Active	Biometrics							SC71Q

Contact Alexis for details of joining. In my experience, the SABS staff members are very helpful, if somewhat overworked.  Messrs Staphorst and Naidoo may be able to answer your specific technical questions. All are copied herein.

HTH.

Kind regards,
 
William Stucke
ICASA Councillor
011-566-3009

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of SM
Sent: 05 May 2014 10:50 AM
To: [email protected]
Subject: [IOZ] SANS 18031

Hello,

The National Gazette No. 36666 (19 July 2013) standardizes some security techniques (cryptography related) as SANS 18031.  Has there been any change to that given that there is a possibility of one of the security techniques has a vulnerability?

Regards,
-sm


_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz

To view our Disclaimer please click on the following link http://www.icasa.org.za/EmailDisclaimer/tabid/602/Default.aspx

_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz