RIPE NCC Quarterly Planning Q4 2024
Dear colleagues, The Q4 2024 quarterly plans for our development teams are now published on our website: https://www.ripe.net/quarterly-planning Each quarter, we publish these plans to showcase the work items we will carry out over the next months. We welcome your feedback and encourage you to suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas: - RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification If you have any questions or input on these plans, please share your suggestions on this list or the RIPE NCC Forum: https://forum.ripe.net/ Kind regards, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC
Hi, Thanks for the comprehensive update. Is the SOC2 Type I point in time report available somewhere for members to read? Kaj ________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 11:23 To: members-discuss@ripe.net <members-discuss@ripe.net> Subject: [members-discuss] RIPE NCC Quarterly Planning Q4 2024 [You don't often get email from astergiopoulos@ripe.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Dear colleagues, The Q4 2024 quarterly plans for our development teams are now published on our website: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fquarterly-planning&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694715419%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=7pxOpRHJmcsLZbe0Sacuz01T0FezDrSjtTuBMe19OJM%3D&reserved=0<https://www.ripe.net/quarterly-planning> Each quarter, we publish these plans to showcase the work items we will carry out over the next months. We welcome your feedback and encourage you to suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas: - RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification If you have any questions or input on these plans, please share your suggestions on this list or the RIPE NCC Forum: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.ripe.net%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694747685%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=O4JuMfPJa8pXnvEL%2FtZO%2BS6iYmO5wqIXChgtXED7xcY%3D&reserved=0<https://forum.ripe.net/> Kind regards, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694769163%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=eh73BE3tdrFhMmd9YJb1kwXtrf8RKCUwGPgyGhO9tOg%3D&reserved=0<https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/> As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694789277%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=fJcJPRQrTszXatrtPoTZhqBEN%2B1ShEeYfrkT6Cq0uDI%3D&reserved=0<https://www.ripe.net/membership/mail/mailman-3-migration/>
Hi Kaj, The SOC2 Type I and Type II reports are confidential by nature and, therefore would only be made available upon request, for specific purposes and under certain conditions. We plan to release more information about this topic soon. Cheers, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC www.ripe.net On Mon, 30 Sept 2024 at 10:50, Kaj Niemi <kajtzu@basen.net> wrote:
Hi,
Thanks for the comprehensive update.
Is the SOC2 Type I point in time report available somewhere for members to read?
Kaj ________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 11:23 To: members-discuss@ripe.net <members-discuss@ripe.net> Subject: [members-discuss] RIPE NCC Quarterly Planning Q4 2024
[You don't often get email from astergiopoulos@ripe.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
Dear colleagues,
The Q4 2024 quarterly plans for our development teams are now published on our website: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fquarterly-planning&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694715419%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=7pxOpRHJmcsLZbe0Sacuz01T0FezDrSjtTuBMe19OJM%3D&reserved=0
Each quarter, we publish these plans to showcase the work items we will carry out over the next months. We welcome your feedback and encourage you to suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas:
- RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification
If you have any questions or input on these plans, please share your suggestions on this list or the RIPE NCC Forum: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.ripe.net%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694747685%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=O4JuMfPJa8pXnvEL%2FtZO%2BS6iYmO5wqIXChgtXED7xcY%3D&reserved=0
Kind regards,
Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694769163%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=eh73BE3tdrFhMmd9YJb1kwXtrf8RKCUwGPgyGhO9tOg%3D&reserved=0 As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7Ca915a7d974264cecb11508dce12b9fdd%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638632824694789277%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=fJcJPRQrTszXatrtPoTZhqBEN%2B1ShEeYfrkT6Cq0uDI%3D&reserved=0
Hi, Thanks for getting back to me. Technically you’re right, of course. SOC 2 reports are restricted use reports according to AICPA. They're not meant for public consumption. In addition to internal validation of at least one of the five trust services criteria, the reports are meant to demonstrate to customers, stakeholders, partners the same thing. I'll liken a customer to a member. Some of us might also want or need these for our own vendor risk management processes including checks for SOC2 compliance, eventual ISO 27001 compliance as well as possible carve outs for our own audits. In practice, however, every data center provider, every cloud service provider, every SaaS/PaaS provider, etc. supplies these under (at least) a click-through NDA to both prospective clients and certainly supply them their customers upon request. Happy to sign an NDA but just as happy to see the auditor's signed opinion published within lirportal. Kaj Sent from my iPad ________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 4:37 PM To: Kaj Niemi <kajtzu@basen.net> Cc: members-discuss@ripe.net <members-discuss@ripe.net> Subject: Re: [members-discuss] RIPE NCC Quarterly Planning Q4 2024 Hi Kaj, The SOC2 Type I and Type II reports are confidential by nature and, therefore would only be made available upon request, for specific purposes and under certain conditions. We plan to release more information about this topic soon. Cheers, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628167290%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=ANYLgHsPTAc69ubYb62toBIa9uE6rssVZHn0bSS3O0Q%3D&reserved=0<http://www.ripe.net/> On Mon, 30 Sept 2024 at 10:50, Kaj Niemi <kajtzu@basen.net> wrote:
Hi,
Thanks for the comprehensive update.
Is the SOC2 Type I point in time report available somewhere for members to read?
Kaj ________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 11:23 To: members-discuss@ripe.net <members-discuss@ripe.net> Subject: [members-discuss] RIPE NCC Quarterly Planning Q4 2024
[You don't often get email from astergiopoulos@ripe.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
Dear colleagues,
The Q4 2024 quarterly plans for our development teams are now published on our website: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fquarterly-planning&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628188430%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=xpwfeiKUo1NK9pVZ00bYjVKyGffDz5mbCAd43A0uCTo%3D&reserved=0<https://www.ripe.net/quarterly-planning>
Each quarter, we publish these plans to showcase the work items we will carry out over the next months. We welcome your feedback and encourage you to suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas:
- RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification
If you have any questions or input on these plans, please share your suggestions on this list or the RIPE NCC Forum: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628200365%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=JruUSU3yCDUemNt%2FCGQFjIbh6a38XEJGN6cXnT6fQRM%3D&reserved=0<https://forum.ripe.net/>
Kind regards,
Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628211863%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=v1VTE%2F7TPscZlU14qKn9dPlmFPphfmTzaTgFzpWgPpY%3D&reserved=0<https://mailman.ripe.net/mailman3/lists/members-discuss.ripe.net/> As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628222824%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=5PTSQzlZsxSxzdLMk3Cjz5Ye%2BRvgUhXB82eXsPvru60%3D&reserved=0<https://www.ripe.net/membership/mail/mailman-3-migration/>
Hi Kaj, Thanks for your input - we’ve shared it with the relevant teams. We plan to release more details about the reports soon. Kind regards, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC www.ripe.net On Mon, 30 Sept 2024 at 17:22, Kaj Niemi <kajtzu@basen.net> wrote:
Hi,
Thanks for getting back to me. Technically you’re right, of course. SOC 2 reports are restricted use reports according to AICPA. They're not meant for public consumption. In addition to internal validation of at least one of the five trust services criteria, the reports are meant to demonstrate to customers, stakeholders, partners the same thing. I'll liken a customer to a member.
Some of us might also want or need these for our own vendor risk management processes including checks for SOC2 compliance, eventual ISO 27001 compliance as well as possible carve outs for our own audits.
In practice, however, every data center provider, every cloud service provider, every SaaS/PaaS provider, etc. supplies these under (at least) a click-through NDA to both prospective clients and certainly supply them their customers upon request.
Happy to sign an NDA but just as happy to see the auditor's signed opinion published within lirportal.
Kaj
Sent from my iPad
________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 4:37 PM To: Kaj Niemi <kajtzu@basen.net> Cc: members-discuss@ripe.net <members-discuss@ripe.net> Subject: Re: [members-discuss] RIPE NCC Quarterly Planning Q4 2024
Hi Kaj,
The SOC2 Type I and Type II reports are confidential by nature and, therefore would only be made available upon request, for specific purposes and under certain conditions. We plan to release more information about this topic soon.
Cheers,
Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628167290%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=ANYLgHsPTAc69ubYb62toBIa9uE6rssVZHn0bSS3O0Q%3D&reserved=0
On Mon, 30 Sept 2024 at 10:50, Kaj Niemi <kajtzu@basen.net> wrote:
Hi,
Thanks for the comprehensive update.
Is the SOC2 Type I point in time report available somewhere for members to read?
Kaj ________________________________ From: Adonis Stergiopoulos <astergiopoulos@ripe.net> Sent: Monday, September 30, 2024 11:23 To: members-discuss@ripe.net <members-discuss@ripe.net> Subject: [members-discuss] RIPE NCC Quarterly Planning Q4 2024
[You don't often get email from astergiopoulos@ripe.net. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]
Dear colleagues,
The Q4 2024 quarterly plans for our development teams are now published on our website: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fquarterly-planning&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628188430%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=xpwfeiKUo1NK9pVZ00bYjVKyGffDz5mbCAd43A0uCTo%3D&reserved=0
Each quarter, we publish these plans to showcase the work items we will carry out over the next months. We welcome your feedback and encourage you to suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas:
- RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification
If you have any questions or input on these plans, please share your suggestions on this list or the RIPE NCC Forum: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628200365%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=JruUSU3yCDUemNt%2FCGQFjIbh6a38XEJGN6cXnT6fQRM%3D&reserved=0
Kind regards,
Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ripe.net%2Fmailman3%2Flists%2Fmembers-discuss.ripe.net%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628211863%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=v1VTE%2F7TPscZlU14qKn9dPlmFPphfmTzaTgFzpWgPpY%3D&reserved=0 As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ripe.net%2Fmembership%2Fmail%2Fmailman-3-migration%2F&data=05%7C02%7C%7C056f2c67e2e04e13773408dce1550afe%7Cd0b71c570f9b4acc923b81d0b26b55b3%7C0%7C0%7C638633002628222824%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C4000%7C%7C%7C&sdata=5PTSQzlZsxSxzdLMk3Cjz5Ye%2BRvgUhXB82eXsPvru60%3D&reserved=0
participants (2)
-
Adonis Stergiopoulos -
Kaj Niemi