13. End Matter

Working group representation

The following organisations contributed representatives to the working group that developed this Standard:

Government Communications and Security Bureau
Inland Revenue
Information Technology Association of New Zealand (represented by IBM NZ Ltd)
Land Transport New Zealand
Ministry of Agriculture and Forestry
Ministry of Education
Ministry of Health
Ministry of Social Development
New Zealand Police
New Zealand Qualifications Authority
RSA Security Inc.
State Services Commission

Acknowledgement

The State Services Commission gratefully acknowledges the contribution of time and expertise from all those involved in developing this Standard, with particular acknowledgement to the subject matter experts and reviewers Enspier Technologies Inc. and RSA Security Inc. The Secure Messaging working group wish to particularly acknowledge the extensive contribution of Robert Philpott, immediate past co-Chair of the OASIS Security Services (SAML) Technical Committee.

Copyright

This document is subject to Crown copyright. The material may be used, copied and re-distributed free of charge in any format or media, provided that the source and copyright status are acknowledged (i.e. this material was produced by the State Services Commission © Crown copyright 2006).

Referenced documents

Joint Australian/New Zealand Standards

AS/NZS ISO/IEC 17799:2006 Information technology - security techniques - code of practice for information security management. www.standards.co.nz

AS/NZS ISO/IEC 27001:2006 Information technology - security techniques - information security management systems - requirements. www.standards.co.nz

AS/NZS 4360:2004 Risk management (Australian/New Zealand Standard). www.standards.co.nz

SAA/NZS HB 231:2004 Information security risk management guidelines (Australian/New Zealand handbook). www.standards.co.nz

SAA/NZS HB 436:2004 Risk management guidelines - Companion to AS/NZS 4360:2004 (Australian/New Zealand handbook). www.standards.co.nz

Other

Bradner, S. March 1997. Key words for use in RFCs to Indicate Requirement Levels. (RFCÂ 2119). www.ietf.org

Department of Internal Affairs. Evidence of identity standard. Version 1.0. www.dia.govt.nz

Department of the Prime Minister and Cabinet. 2002. Security in the government sector. (SIGS) www.security.govt.nz

Government Communications Security Bureau. October 2005. New Zealand Government information technology security manual - NZSIT 400 (NZSIT 400). Version 1.0. www.security.govt.nz

New Zealand Security Intelligence Service. 2002. Protective Security Manual. www.nzsis.govt.nz

OASIS. 2005. Security Assertion Markup Language v2.0. www.oasis-open.org

State Services Commission. 2004. Authentication for e-government: Best practice framework for authentication. www.e.govt.nz

State Services Commission. 2004. New Zealand Government Web Guidelines v2.1. www.e.govt.nz

State Services Commission. 2005a. Development goals for the state services. www.e.govt.nz

State Services Commission. 2005b. Authentication for e-government: Government Logon Service design overview. www.e.govt.nz

State Services Commission. 2006. Authentication key strengths standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Data formats for identity records standard. Version 1.0 www.e.govt.nz

State Services Commission. 2006. Guidance on Multi-Factor Authentication. www.e.govt.nz

State Services Commission. 2006. Guide to authentication standards for online services. Version 1.0. www.e.govt.nz

State Services Commission. 2006. New Zealand e-government interoperability framework (NZÂ e-GIF). Version 3.0. www.e.govt.nz

State Services Commission. 2006. Password standard. Version 1.0. www.e.govt.nz

State Services Commission, 2006. Security assertion messaging framework. www.e.govt.nz

New Zealand legislation

Privacy Act 1993.

Related websites

www.e.govt.nz
www.oasis-open.org
www.projectliberty.org
www.privacy.org.nz
www.whitehouse.gov
www.w3c.org

Latest revisions

This Standard is to be reviewed from time to time by the working group to keep it up to date with changes in technology and business requirements in the sector.

Users should ensure they access the latest revisions of the NZ e-GIF authentication standards including amendments (if any). These can be found at www.e.govt.nz. Users should also access the latest revisions of the documents included in the list of referenced documents already set out in this standard.

Review of standards

Suggestions for improvement of this Standard will be welcomed. They should be sent to the Manager, e-GIF Operations, State Services Commission, PO Box 329, Wellington. Alternatively, suggestions can be sent by email to e-GIF@ssc.govt.nz