7. End matter

Working group representation

The following organisations contributed representatives to the working group that developed this Guide:

Auckland City Council
Business New Zealand
Department of Internal Affairs
Government Communications Security Bureau
Inland Revenue
InternetNZ
Land Information New Zealand
Land Transport New Zealand
Ministry of Health
Ministry of Social Development
New Zealand Police
New Zealand Qualifications Authority
State Services Commission
Westpac New Zealand

Acknowledgement

The State Services Commission gratefully acknowledges the contribution of time and expertise from all those involved in developing this Guide.

Copyright

This document is subject to Crown copyright. The material may be used, copied and re-distributed free of charge in any format or media, provided that the source and copyright status is acknowledged (i.e. this material was produced by the State Services Commission © Crown copyright 2006).

Referenced documents

Joint Australian/New Zealand Standards and Handbooks

AS/NZS 4360:2004 Risk management (Australian/New Zealand Standard). www.standards.co.nz

SAA/SNZ HB 436:2004 Risk management guidelines (Australian/New Zealand handbook). www.standards.co.nz

SAA/SNZ HB 231:2004 Information security risk management guidelines (Australian/New Zealand handbook). www.standards.co.nz

American Standard

National Institute of Standards and Technology. 2006. Electronic authentication guideline (NIST 800-63). Version 1.0.2. www.csrc.nist.gov

Other

AusCERT. 2005. 2005 Australian computer crime and security survey. www.auscert.org.au

Bradner, S. March 1997. Key words for use in RFCs to indicate requirement levels (RFC 2119). www.ietf.org

Department of Internal Affairs. 2006. Evidence of identity standard. Version 1.0. www.dia.govt.nz

Department of the Prime Minister and Cabinet. 2002. Security in the government sector. www.security.govt.nz

Department of the Prime Minister and Cabinet. 2001. Guidelines for protection of official information. www.security.govt.nz

Office of Management and Budget. 2003. E-authentication guidance for federal agencies (M-04-04). www.whitehouse.gov

State Services Commission. 2006. Authentication key strengths standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Data formats for identity records standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Guidance on multi-factor authentication. www.e.govt.nz

State Services Commission. 2006. New Zealand e-government interoperability framework (NZ e-GIF). Version 3.0. www.e.govt.nz

State Services Commission. 2006. Password standard. Version 1.0. www.e.govt.nz

State Services Commission. 2006. Security assertion messaging framework . www.e.govt.nz

State Services Commission. 2005a. Development goals for the State Services. www.e.govt.nz

State Services Commission. 2005b. Authentication for e-government: Government Logon Service design overview. www.e.govt.nz

State Services Commission. 2004. Authentication for e-government: best practice framework for authentication. www.e.govt.nz

State Services Commission. New Zealand security assertion messaging standard. (In preparation.) www.e.govt.nz

Latest revisions

This Guide is to be reviewed from time to time by the working group so that it keeps up to date with changes in technology and business requirements in the sector.

Users should ensure they access the latest revisions of the NZ e-GIF authentication standards including amendments (if any). These can be found at www.e.govt.nz. Users should also access the latest revisions of the documents included in the list of referenced documents already set out in this Guide.

Review of standards

Suggestions for improvement of this Guide are welcome. They should be sent to the Manager, e-GIF Operations, State Services Commission, PO Box 329, Wellington. Alternatively, suggestions can be sent by email to e-gif@ssc.govt.nz