<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Barry -
<div class=""><br class="">
</div>
<blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class="">
<div class="">FYI – In addition to a regular financial audit, ARIN periodically has a third-party operational audit conducted of the registry, including random sampling of transactions and detailed review of same. </div>
<div class=""><br class="">
</div>
<div class="">The results of the audit are used to both reaffirm registry integrity and have led to improvements in our processes in multiple areas including internal review/signoff practices, transaction logging, and fraud investigation. </div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class="">/John</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">John Curran</div>
<div class="">President and CEO</div>
<div class="">American Registry for Internet Numbers</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div>
<blockquote type="cite" class="">
<div class="">On 6 Feb 2020, at 1:38 PM, <a href="mailto:bzs@theworld.com" class="">
bzs@theworld.com</a> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class=""><br class="">
Given events including the IPv4 runout etc perhaps it's long overdue<br class="">
that the RIRs should hire a professional big-name (we used to call<br class="">
them Big 5) accounting firm to audit or at least review IP address,<br class="">
ASN, etc. allocation.<br class="">
<br class="">
I am not talking about money, I am talking about resource allocation.<br class="">
<br class="">
That would be a step towards accountability.<br class="">
<br class="">
It would likely be a lot better than "someone on NANOG noticed a<br class="">
discrepancy let's shout at each other about it for a few days."<br class="">
<br class="">
The "rules" really aren't that difficult even if the details of<br class="">
technical management can be.<br class="">
<br class="">
A modern accounting firm could find the talent to grasp how it all<br class="">
should work and review how it has worked and is working.<br class="">
<br class="">
I've worked with accountants, they know things like what we'd call in<br class="">
a phrase "game theory" (you cut, I choose, etc) regarding resource<br class="">
allocation, memorialization (is the record-keeping broken?), "forcing"<br class="">
organizations to fix outright bugs in rules and record-keeping,<br class="">
internal accountability (e.g., who has access to critical records?<br class="">
what's the process when an error or fraud occurs?), proper reporting,<br class="">
etc.<br class="">
<br class="">
It wouldn't be cheap.<br class="">
<br class="">
But as an easy suggestion I'd recommend that ISOC help with the<br class="">
funding for such a project. There could be other sources.<br class="">
<br class="">
Or possibly, I haven't a clue how the numbers might work, a $10 or $20<br class="">
new annual resource allocation surcharge to underwrite such auditing.<br class="">
<br class="">
It would be a new and potentially valuable service so, within reason,<br class="">
justified.<br class="">
<br class="">
-- <br class="">
-Barry Shein<br class="">
<br class="">
Software Tool & Die | <a href="mailto:bzs@TheWorld.com" class="">bzs@TheWorld.com</a> |
<a href="http://www.TheWorld.com" class="">http://www.TheWorld.com</a><br class="">
Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD<br class="">
The World: Since 1989 | A Public Information Utility | *oo*<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>