[rpd] Policy Compliance Dashboard - AFPUB-2020-GEN-001-DRAFT01

[Mike Silber]

Our colleagues seem to be under the impression that the Board has an
operational role and involved in performing compliance checks ....

Last time I checked, that is a staff function.

Additional tools to assist staff, while making processes more transparent,
are welcomed by me.

On Wed, 05 Aug 2020 at 19:46, JORDI PALET MARTINEZ via RPD <rpd at afrinic.net>
wrote:


> Hi Paschal,

>

>

>

> Can you tell me where can any member check if he is complying with its

> actual compliance status for all the policy manual?

>

>

>

> Can you tell me if when there is a lack of compliance, if the member is

> receiving an automated notification or if it will be only known because

> another member realizes it and tell him (or if it is a competitor and want

> to create harm may be claim to the staff), or the staff or something

> similar?

>

>

>

> Those are just simple questions that confirm that this is not actually

> being done, at least not in an automated and as much completed fashion as

> possible.

>

>

>

> Regards,

>

> Jordi

>

> @jordipalet

>

>

>

>

>

>

>

> El 5/8/20 19:22, "Paschal Ochang" <pascosoft at gmail.com> escribió:

>

>

>

> Dear Jordi,

>

>

>

> I do not agree with this “policy compliance dashboard” proposal on the

> simple fact that it’s just an additional complication to an already working

> system.

>

> All the points mentioned on the proposal are supposed to be taken care of

> by the Afrinic board and are very obvious matters that do not require a

> whole new complicated strategy that won’t bring any additional value.

>

> Clicking on a button to check a list of violations and inconsistencies

> doesn’t automatically mean that something will be done about it.

>

> I don’t think the Afrinic board needs this dashboard to tell them

> something that they already know. It’s really unnecessary and a total waste.

>

>

> On Wednesday, August 5, 2020, JORDI PALET MARTINEZ via RPD <

> rpd at afrinic.net> wrote:

>

> Hi Taiwo, all,

>

> The RSA has very generic provisions and it includes the compliance with

> all the policies, not just payments.

>

> However, not all the members are following the updates to the CPM. Many

> members which I talk aren't following the PDP at all. You may understand

> the consequences this have with policy changes and I'm sure that staff is

> not doing a manual verification to all the members with every policy

> change. They can tell us.

>

> This dashboard, will allow the members to automatically know if anything

> they do is following the policies, even if the policies change (once the

> dashboard is updated with a new implemented policy/change) and get a

> notification, so they can correct it.

>

> This dashboard provides a very useful and informative way for ensuring

> that every member is up to date, and if they don't act then it is a systems

> to allow the staff to automatically track lack of compliance, provide

> corrective measures, or even tell the PDWG "this is not working, because

> nobody can comply with that". Those are just examples of how useful an

> automated system can be.

>

> It also protects the members against sudden (without notice) overreactions

> of the staff (which may be totally right, according to the RSA), but we all

> understand that everybody can make a mistake and have a notification

> instead of resources being taken.

>

> I'm sure today the staff have some ways to detect lack of payment, or lack

> of policy compliance, but what we are trying to do here is to automate it

> in a consistent way, so even if there will be, as with many policies, some

> development work, at the end, it is saving expenses to all and making

> everybody more productive.

>

> Look also to the case, for example with a pandemic, or a civil war, or

> whatever, of a country which doesn't allow to make payments to Afrinic even

> to critical infrastructures, like the ccTLD. Following the RSA, those

> resources should be taken, but with this proposal, the staff can notify the

> situation to the Board and the Board could take special measures instead of

> recovering the resources (which right now they are forced to do according

> to the RSA/bylaws). I think we should have a way to accommodate for that.

>

> Last but not least, when resources are recovered (a company goes to

> bankruptcy, or because of lack of payment, or repetitive and persistent

> lack of policy compliance, etc.), we define a way about how we publish and

> incorporate those resources back to the AFRINIC pool.

>

> Regards,

> Jordi

> @jordipalet

>

>

>

> El 5/8/20 18:47, "Taiwo Oyewande" <taiwo.oyewande88 at gmail.com> escribió:

>

>

>     I have read through your “Policy Compliance Dashboard” proposal.

>     I will like to enquire if Afrinic Isn’t already keeping track of the

> members that do not comply with the already existing rules, members that do

> not pay their fees or those that violate the policies in general?

>     It seems that this proposal is just a repetition of what the Afrinic

> board’s job already is.

>

>     Regards

>     Taiwo

>

>     > On 5 Aug 2020, at 11:01, JORDI PALET MARTINEZ via RPD <

> rpd at afrinic.net> wrote:

>     >

>     > Hi all,

>     >

>     > I will like to know if anyone has any inputs for the proposal

> "Policy Compliance Dashboard" (Draft1) - AFPUB-2020-GEN-001-DRAFT01.

>     >

>     > https://www.afrinic.net/policy/proposals/2020-gen-001-d1#proposal

>     >

>     > It will be also good to get at least, a draft impact analysis from

> the staff. Even if it is not a complete/formal one it will be fine, just

> the key points/issues that they want to consider, if any.

>     >

>     > It is not nice to get issues presented the same day that we should

> reach consensus, when we have the opportunity, several weeks ahead, to

> resolve them!

>     >

>     > Those inputs, could be used to improve this version if we get them

> during this week or early next one, so we have an updated version to be

> presented in the on-line PPM.

>     >

>     > So please, provide your comments.

>     >

>     > Tks!

>     >

>     > Regards,

>     > Jordi

>     > @jordipalet

>     >

>     >

>     >

>     >

>     >

>     > **********************************************

>     > IPv4 is over

>     > Are you ready for the new Internet ?

>     > http://www.theipv6company.com

>     > The IPv6 Company

>     >

>     > This electronic message contains information which may be privileged

> or confidential. The information is intended to be for the exclusive use of

> the individual(s) named above and further non-explicilty authorized

> disclosure, copying, distribution or use of the contents of this

> information, even if partially, including attached files, is strictly

> prohibited and will be considered a criminal offense. If you are not the

> intended recipient be aware that any disclosure, copying, distribution or

> use of the contents of this information, even if partially, including

> attached files, is strictly prohibited, will be considered a criminal

> offense, so you must reply to the original sender to inform about this

> communication and delete it.

>     >

>     >

>     >

>     >

>     > _______________________________________________

>     > RPD mailing list

>     > RPD at afrinic.net

>     > https://lists.afrinic.net/mailman/listinfo/rpd

>

>

>

> **********************************************

> IPv4 is over

> Are you ready for the new Internet ?

> http://www.theipv6company.com

> The IPv6 Company

>

> This electronic message contains information which may be privileged or

> confidential. The information is intended to be for the exclusive use of

> the individual(s) named above and further non-explicilty authorized

> disclosure, copying, distribution or use of the contents of this

> information, even if partially, including attached files, is strictly

> prohibited and will be considered a criminal offense. If you are not the

> intended recipient be aware that any disclosure, copying, distribution or

> use of the contents of this information, even if partially, including

> attached files, is strictly prohibited, will be considered a criminal

> offense, so you must reply to the original sender to inform about this

> communication and delete it.

>

>

>

>

> _______________________________________________

> RPD mailing list

> RPD at afrinic.net

> https://lists.afrinic.net/mailman/listinfo/rpd

>

>

>

> --

> Kind regards,

>

> Paschal.

>

> **********************************************

> IPv4 is over

> Are you ready for the new Internet ?

> http://www.theipv6company.com

> The IPv6 Company

>

> This electronic message contains information which may be privileged or

> confidential. The information is intended to be for the exclusive use of

> the individual(s) named above and further non-explicilty authorized

> disclosure, copying, distribution or use of the contents of this

> information, even if partially, including attached files, is strictly

> prohibited and will be considered a criminal offense. If you are not the

> intended recipient be aware that any disclosure, copying, distribution or

> use of the contents of this information, even if partially, including

> attached files, is strictly prohibited, will be considered a criminal

> offense, so you must reply to the original sender to inform about this

> communication and delete it.

>

> _______________________________________________

> RPD mailing list

> RPD at afrinic.net

> https://lists.afrinic.net/mailman/listinfo/rpd

>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20200805/7d129a53/attachment.html>