15. The Technical Requirements for Exchange Policy and Procedure does not identify certificate policies, system or individual authentication and identity requirements, or other security-related requirements. How will the DxF identify the technical requirements for security during exchange?
The Nationwide Networks and Frameworks noted in the Policy and Procedure all have established and documented security models that include bilateral authentication of individuals and/or systems as appropriate. The California Trusted Exchange Network (CTEN) that currently supports inter-HIO communications does as well. The DxF and this Policies and Procedures will leverage these existing capabilities