<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:544410923;
mso-list-type:hybrid;
mso-list-template-ids:-1320094102 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:987855083;
mso-list-type:hybrid;
mso-list-template-ids:626294830 -1013128934 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2
{mso-list-id:1317493841;
mso-list-type:hybrid;
mso-list-template-ids:-494786936 834977034 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3
{mso-list-id:1675111827;
mso-list-template-ids:359169964;}
@list l4
{mso-list-id:1814445007;
mso-list-template-ids:1663989336;}
@list l4:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l5
{mso-list-id:2128549055;
mso-list-type:hybrid;
mso-list-template-ids:-504485378 -233831470 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l5:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:54.0pt;
text-indent:-18.0pt;}
@list l5:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:90.0pt;
text-indent:-18.0pt;}
@list l5:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:126.0pt;
text-indent:-9.0pt;}
@list l5:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:162.0pt;
text-indent:-18.0pt;}
@list l5:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:198.0pt;
text-indent:-18.0pt;}
@list l5:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:234.0pt;
text-indent:-9.0pt;}
@list l5:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:270.0pt;
text-indent:-18.0pt;}
@list l5:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:306.0pt;
text-indent:-18.0pt;}
@list l5:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:342.0pt;
text-indent:-9.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="en-IT" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Dear SM&C WG,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In attachment you’ll find the presentation that Peter Shames, the SEA area director delivered to CESG on a dedicated meeting on the topic of our MAL blue book CESG approval for Agency Review.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Peter had raised 21 PIDs as condition for his approval of the MAL book to start the Agency Review.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We had reviewed in the WG these PIDs and dispositioned them, accepting basically most of them and asking for a meeting to go through them.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The WG was not of the opinion that the raised PIDs were too dramatic or substantial and we considered them easy to fix with editorial changes.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In response to our request for a meeting to go through the PID resolutions, Peter sent an email, opening a generic discussions regarding MAL being too abstract to be a Blue Book and suggested we should consider making
it a Magenta Book.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I escalated through our Area Director the matter to the CESG, requesting a focused discussion on the PIDs to achieve a satisfactory closure of the raised conditions by Peter, so that MAL BB can go to the Agency Review,
instead of having yet once again a very high level discussion. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">CESG met last Monday to discuss the matter and the way forward. Mario Merri as MOIMS area director and myself as WG chair delivered a presentation, which you will find also attached.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In the meeting Peter presented to the CESG members the following message (see the attached presentation)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoListParagraph" style="margin-left:0cm;mso-list:l2 level1 lfo5"><span lang="EN-US">The quality of our Blue Book is so bad that it does not pass for going to the Agency Review. Here mainly the deficiencies he listed are:<o:p></o:p></span></li><ol style="margin-top:0cm" start="1" type="a">
<li class="MsoNormal" style="color:black;mso-list:l2 level2 lfo5"><span lang="EN-US">Missing clear definition of</span> terms
<span lang="EN-US">in the BB</span><o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l2 level2 lfo5">Missing references<span lang="EN-US">: Although this is unchanged from the last two published versions of the BB</span><o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l2 level2 lfo5">Vague Definitions<span lang="EN-US">: Mainly the MAL Object was used as an example</span><o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l2 level2 lfo5">PICS<span lang="EN-US">: Saying what we have in the book “is a joke”</span><o:p></o:p></li></ol>
<li class="MsoNormal" style="color:black;mso-list:l2 level1 lfo5"><span lang="EN-US">Security: Saying it is not acceptable that our BB says “Security and in particular Access Contorl is someone else’s job”.
</span><o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l2 level1 lfo5"><span lang="EN-US">The high-level discussion regarding the MAL BB to be too abstract to be implementable, hence it should be a MB</span><o:p></o:p></li></ol>
<p class="MsoListParagraph" style="margin-left:72.0pt"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The conclusion of the meeting was <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoListParagraph" style="margin-left:18.0pt;mso-list:l5 level1 lfo7"><span lang="EN-US">The SM&C WG shall review all the PIDs again in detail and update the book where applicable accordingly. For this Peter has provided an additional column in the
attached Excel file to this email. I have met with Cesar and have asked him to give this a thorough attention and to update the book according to Peter’s additional comments. As we discussed in the dedicated meeting of the WG, we agreed with most of Peter
comments and can update the book accordingly. Some of his comments were more questions than comments. We answered them but we can add some text to be more explicit. Some of the PIDs were raised on deleted part of the book due to his misunderstanding of the
MS Word change tracking. In the meeting last Monday, Peter used the Excel file to tell CESG that we have rejected 8 of his 21 PIDs. Ignoring the fact that 3 of them were his misunderstanding and related to deleted parts of the document and two were duplicated
questions that we answered positively (e.g. is XML allowed?) but the PIDs did not need any change of the book. Nonetheless, we should put as much as possible effort to remove any ambiguity and take this as an opportunity to review again with more caution Peter’s
presentation and update the BB, in order to remove any doubts about the points he has raised in the PIDs. It was agreed that two other Area Directors shall also review the book and Peter’s PIDs. So we may receive additional comments that we should equally
take seriously. Cesar will send a new updated version of the BB in the course of the next week. I will setup a WG meeting for the week after. I will be on leave and given the Summer holiday period, I know some of you will be away as well. Nonetheless I took
the action to complete this process with the WG before end August. We also agreed to hold a meeting with Peter to go through his PIDs and the updates in the BB and verify their closure. If any of the PIDs cannot be concluded, Mario would escalate again to
CESG. Then the CESG would then meet once more and go through the open PIDs one by one. If no conclusion can be achieved in that one meeting, the CESG chair would escalate then to the CMC.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:18.0pt;mso-list:l5 level1 lfo7"><span lang="EN-US">For the Security, the comments were the same that Peter had raised on the reference book. We had back then answered them and had extensive discussions with escalation.
After meeting with the Security WG the final conclusion was to add examples of some concrete deployments to our Green Blook and add a reference in the MB to the chapter in the Green Book. In the CESG meeting, I explained the logic (again) that MAL does not
make any assumption on the technology and the level of sophistication of the Access Control. That it is a pure deployment choice. Many of our missions today do not have any access control over the S2G link. Some other missions do have extensive security requirements
of end to end encryption and content based access control. Now if the Access Control does not exist, or if it only checks a text based user name/password or it uses a certificate to authenticate and a Access Management System a la LDAP or god knows what is
the choice and the job of the Access Control and not that of the MAL. To MAL this is all transparent. For MAL it is important to define a clear and understandable interface, through which all of these choices can be plugged in and this is what the MAL BB defines
in a simple manner. Peter stated in the CESG meeting that if we had written few sentences explaining exactly this, he would be happy. So I asked Cesar to do exactly that.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:18.0pt;mso-list:l5 level1 lfo7"><span lang="EN-US">The CESG and its chairman concluded clearly in the meeting and in the follow up emails that the high level discussion of abstraction vs concrete and the discussion
of BB vs MB is not on the table and is a no go. MAL has been published as BB twice by CCSDS and it’s update is a BB project that is approved by the CMC and it is as a BB in the charter of SM&C WG and CESG chair said very clearly that he considers this discussion
“inappropriate” and does not accept further discussions with this regard. <o:p></o:p></span></li></ol>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">So, next steps are <o:p></o:p></span></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo8"><span lang="EN-US">To receive the updated book from Cesar next week, review it carefully against the PIDs and the additional comments provided by Peter in the extra column and the
presentation.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo8"><span lang="EN-US">Then to have a meeting in the week 8 Aug to go one by one through the PIDs with the WG and confirm the agreement of the WG to each PID resolution and the respective
update.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo8"><span lang="EN-US">To call for a meeting with Peter (and the other Area Directors, if they provide additional comments) in the week of 15 Aug and go through the PID resolutions one
by one can confirm their closure or identify the ones for which Peter would not agree to our resolution.<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Kind Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Mehran<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify
the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo@esa.int).
</body>
</html>