1. ECI OCS Workshop 29/11/2012

2. Agenda – Morning session
9h15 Welcome & Introduction
9h30 Introduction to European Citizens' Initiative
10h00 OCS architecture
10h30 ISO security standards
11h00 Coffee break
11h30 Open source tools for Vulnerability and Penetration tests
12h00 How to collaborate to OCS project?

3. Agenda – Afternoon Labs
14h00 Lab 1: MySQL install and set-up
14h45 Lab 2: GlassFish install and configuration
15h30 Lab 3: Deployment and set-up d'OCS
16h15 Lab 4: Deployment OCS Virtual Image
17h00 End of the workshop

4. ECI:OCS
You wish to collect online?
Get your system certified.
Max. 1 month
Collect statements of support in at least 7 member states.
Max. 12 months
OCS
Get statements of support certified by member states. Max. 3 months
The main focus of my presentation is to describe the Open Source Tool built by the Commission funded by the ISA program to facilitate the collection of statements of support. OCS is an open source web tool to be used by Initiative organisers to collect online supports for their initiatives.

5. ECI Online Collection System stakeholders
European Commission
National certification and validation authorities
ECI organisers
European Citizens
All the groups are represented in jouinup users.
University: Vienna (A master thesis about OCS), Graz
Fundación Once, European Disability Forum (EDF)

6. ECI Online Collection Software requirements
Open Source Software
Functional requirements from Reg (EU) 211/2011
Security requirements from Reg (EU) 1179/2011
ISO 27k
Multilanguage: 23 European official languages
Support for disable people
WCAG 2.0 compliant
Compatible with all user clients/browsers
ISO (October 2005) – Specification an Information Security Management System
ISO (2005) – Code of practice for information security (hundreds of potential controls and control mechanisms, which may be implemented)
ISO – Information security risk management
W3C Recommendation 11 December 2008 – Web Content Accessibility Guidelines 2.0

7. OCS: Architecture & technology
Standard JEE application
Requires JEE 5 compliant application server
Spring MVC
JSR 220: Enterprise JavaBeansTM 3.0
JSR 317: JavaTM Persistence 2.0
JAXB: xml processing
JMS
Open source interpreted as not requiring additional software licenses. This implies excluding .net, coldfusion, … Only choices left were php or Java. Java provides better support for security.
Provide database scripts for Oracle and MySQL and application server scripts for Weblogic and GlassFish

8. Geographic distribution of OCS users
Source of Information joinup
40 users in total
Anomaly: Austria

9. OCS downloads
Artifacts: ear file + configuration scripts (database and application server)

10. OCS milestones Q1 2011 Q2 2011 Q3 2011 Q4 2011 Q1 2012 Q2 2012 Q3 2012
Corrigendum to Reg EU 211/2011
First online collection system
Expert Group
review of OCS
Risk Assessment
Reg EU 211/2011
Reg EU 1179/2011
REGULATION (EU) No 211/2011 of 16 February 2011
REGULATION (EU) No 1179/2011 of 17 November 2011
ECI Expert Group meeting 12 March 2012
Corrigendum to 211/ March 2012
Open Register E.C.I. 1 April 2012
O.C.S December 2011
O.C.S March 2012
O.C.S March 2012
O.C.S July 2012
O.C.S – Viking edition 21 August 2012
Right2Water online – 3 September 2012
Meeting with organisers since June No budget for Online hosting and no IT knowledge
First OCS
in EC datacentre
OCS 1.0.0
OCS 1.2.0
OCS 1.3.1
OCS VM

11. European Citizens’ Initiative: Useful links & contacts
ECI Register
ECI Online Collection Software in joinup
ECI functional mail box