Page History

...

1. MUST state the full legal identity and contact information for the primary Governance Authority or interdependent Governance Authorities.
2. MUST include policies specifying how any revisions to the GF are identified, developed, reviewed, and approved.
3. SHOULD include at least one public review period for any GF that will be available to the public.

Extensions

This section applies to GFs that permit extensions by incorporating other GFs (a specific feature of some ecosystem GFs). It:

1. MUST state whether the GF can be extended.
2. MUST specify the requirements an Extension Governance Framework must meet in order to be approved.
3. MUST specify the process for an Extension Governance Framework to be approved.
4. MUST define an authoritative mechanism for registration and activation of an approved Extension Governance Framework.
5. MUST define the requirements for notification of the Trust Community about an approved Extension Governance Framework.

Schedule of Controlled Documents

...

1. MUST specify how Members of the Trust Community will ensure information security by reference to:
   1. ToIP Standard Specifications (TSS).
   2. Other regulatory or industry standards.
   3. GF-specific Policies.
   4. Member-specific Policies.
2. MUST specify how Members of the Trust Community will ensure information privacy by  and data protection by reference to:
   1. ToIP Standard Specifications (TSS).
   2. Other regulatory or industry standards.
   3. GF-specific Policies.
   4. Member-specific Policies.
3. SHOULD specify how Members of the Trust Community will ensure information availability by reference to:
   1. ToIP Standard Specifications (TSS).
   2. Other regulatory or industry standards.
   3. GF-specific Policies.
   4. Member-specific Policies.
4. SHOULD specify how Members of the Trust Community will ensure information confidentiality by reference to:
   1. ToIP Standard Specifications (TSS).
   2. Other regulatory or industry standards.
   3. GF-specific Policies.
   4. Member-specific Policies.
5. SHOULD specify how Members of the Trust Community will ensure information processing integrity by reference to:
   1. ToIP Standard Specifications (TSS).
   2. Other regulatory or industry standards.
   3. GF-specific Policies.
   4. Member-specific Policies.

...