1st revised baseline text for X.dpidm-aAI: Terminology and design guidelines for Agentic AI identity management
ITU-T 1ST Revised baseline text for XSTR.gidi : Globally Interoperable Digital Identity (including Humans/Enterprise/Non-Humans i.e. Agentic AI)
ITU-T SG17 (Study Period 2025) Temporary Document 201-WP1
CACAO v2.0 will empower organizations to orchestrate, collaborate, and share cybersecurity playbooks. In the ongoing battle against threat actors, organizations must identify, create, document, and test various steps to detect, investigate, mitigate, and remedy potential threats. The culmination of these steps results in a cybersecurity playbook designed to secure organizational systems, networks, data, and users.
Associate Professor of Cybersecurity at University of Oslo,
Co-chair of the OASIS CACAO Technical Committee
Senior Security Architect, Alexandra Instituttet A/S, Denmark
Will replace ISO/IEC 29115:2013
ISO/IEC 29115:2013 provides a framework for managing entity authentication assurance in a given context. In particular, it:
- specifies four levels of entity authentication assurance;
- specifies criteria and guidelines for achieving each of the four levels of entity authentication assurance;
- provides guidance for mapping other authentication assurance schemes to the four LoAs;
- provides guidance for exchanging the results of authentication that are based on the four LoAs; and
- provides guidance concerning controls that should be used to mitigate authentication threats.
The document provides requirements for implementing Human-to-Human Online Preventative Security (H2H-OPS), which complements ETSI TR 104 137 [i.1] 'Human-to-Human Online Preventative Security'. The principles included in the present document are secure by design, safety by design, and privacy by design. These are supported by annexes covering balancing the different requirements for Human-to-Human Online Preventative Security, demography, education and digital literacy. H2H-OPS is targeted at the operators, designers and service provides that have products, services and applications that allow users to post content online or to interact with each other. For example, social media networks, consumer file cloud storage and sharing sites, video-sharing platforms, online forums, dating services, video games with player-toplayer messaging, and online instant messaging services.
