[AFRINIC-rpd] RE: IPv4 Address Allocation and Assignment proposal

[Andrew Alston]

On 2013/09/10 9:05 PM, "Keshwarsingh Nadan"
<keshwarsingh.nadan at millenium.mu> wrote:

>Guys just my 2 cents...
>
>7.3 Documentation
>
>In order to properly evaluate requests, an RIR must carefully examine all
>relevant documentation relating to the networks in question. Such
>documentation may include network engineering plans, subnetting plans,
>descriptions of network topology, and descriptions of network routing
>plans. All documentation should conform to a consistent standard set by
>the hostmasters and any estimates and predictions that are documented
>must be realistic and justifiable. An RIR may also request remote access
>to the network in question but not be limited to:
>
>- Colocation customer equipment (Hypervisors, Routers, Servers, Switches).
>- Core routers.
>- DHCP servers.
>- Hypervisors.

Something else a friend pointed out to meŠ.  Since the PCI DSS standard
requires security information to be shared based on a strict need-to-know
basis, in a manner that provides a complete audit chain, and only after
passing standard background checks HR has decided are adequate for the
function, either this proposal implies that no African company which uses
IP can be PCI DSS compliant and as such Africa will be unable to
participate in e-commerce, or should this proposal ever become reality,
AfriNIC will have to be willing to submit all employees to a full
background check, including drug testing.

If the latter is this case, please amend this proposal to include the the
fact that applicants for IP should include an address where urine samples
can be sent for drug testingŠ

Oh, and if this were to ever become reality, please explain how AfriNIC
would be funding the required background checks.


Andrew