<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Katim,<div><br><div><div>On Sep 6, 2013, at 5:18 PM, Katim S. Touray <<a href="mailto:kstouray@gmail.com">kstouray@gmail.com</a>> wrote:</div><blockquote type="cite"><div dir="ltr"><div>My clarification was more to provide a context for your quote from Parminder which read:</div><div><br></div><div><span style="color:rgb(80,0,80);font-family:arial,sans-serif;font-size:13px">"BTW, I think people do know that ICANN needs US government's clearance (or is it, advice) to appoint its Chief Security Officer</span>"</div></div></blockquote><div><br></div>I've long ago stopped reading Parminder's contributions so I missed this.</div><div><br></div><div>As far as I know, that statement is inaccurate, even ignoring the incorrect title (assuming the role meant is the IANA Director of Security). The contractual language states that Commerce must notify and consult in advance with the COR, not that the COR grants clearance for the appointment of the IANA Director of Security.</div><div><br></div><div>Also, a clarification:</div><div><br><blockquote type="cite"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; "><div class="im"><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; ">To help clear the air, here's a direct quote (including my<br>
clarifications in parentheses) from the IANA contract (<br>
<a href="http://www.icann.org/en/about/agreements/iana/contract-01oct12-en.pdf" target="_blank">http://www.icann.org/en/about/<u></u>agreements/iana/contract-<u></u>01oct12-en.pdf</a>):<br>
<br>
"The Contractor [US Department of Commerce] shall designate a<br>
Director of Security who shall be responsible for ensuring technical<br>
and physical security measures, such as personnel access controls. <br>
The Contractor shall notify and consult in advance the COR<br>
[Contracting Officer's Representative] when there are personnel<br>
changes in this position. The Director of Security shall be one of<br>
the key personnel assigned to this contract."<br>
In the above, the Contractor and COR both refer to the USDOC.<br></blockquote></div></blockquote></div></div></blockquote><div><br></div><div>"Contractor" in the above means ICANN, not Dept. of Commerce.</div><div><br></div><div>Regards,</div><div>-drc</div><div><br></div></div></div></body></html>