Independent Certification and Testing for interoperability, security and performance

[davidejalexander]

The demand for evidence to support the veracity of statements about Wallets, Agents and Cloud Storage is increasing across the globe. The formation of Trust Frameworks and Schemes in some cases have not mandated independent certification or testing in favour of providing rules and frameworks. This appears to be changing and the testing and certification is moving the way of Biometrics and Information Security Management Systems as well as conformance to standards and required performance profiles in terms of accuracy and other forms of security testing.

I am simply saying we need to be thinking about this at the architecture level because the code that gets produced within OWF needs to consider the sort of outputs needed to support certification and testing. This could be the ability to. run compliance tests or independent security tests as well as performance tests against protocols, rules and standards.

We at Mydex have built within our architecture logical points where logging required for various types of monitoring and protection also feed into our requirements for audit purpose and compliance testing.

Do we need to add something to the architecture OWF produce that considers how projects may need to consider the range and type of testing and certification that the components or whole solutions the project produces can fit in easily and consistently into future products and use cases to reduce the overheads and costs of audit, reporting and certification and testing.

Questions arising

1. At what layers in the Architecture does this make sense to consider
2. What sort of guidance can we build and provide that would be useful for any project regardless of its languages and context
3. What existing best practice is out there we can bring to this discussion
4. How do we explain the benefits to projects and wider stakeholders about building this thinking into the OWF architecture and build a community of practice around this that will attract Standards Development Organisations, Certification Assessment Bodies, Independent Testing Bodies, and those looking at approaches to follow in the creation of an ecosystem that embeds OWF into its architecture