gec update to iti elcq2 –assess need for full revision (as per new policy) common criteria q1...

21
GEC Update to ITI ELC October 2017

Upload: others

Post on 27-Jul-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

GEC Update to ITI ELC

October 2017

Page 2: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

Today’s Discussion

GEC Overview to ITI October 20172

1. Review of EPEAT 2017 activities and preview of 2018

activities

2. Update on GEC 2017 activities and preview of 2018

activities

3. Overview of GEC Purchasers Guide for Addressing

Labor and Human Rights Impacts in IT Procurements

Page 3: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

EPEAT Program

GEC Overview to ITI October 20173

2017 2018

Program Improvements• Consistency in the assurance

system• Efficiency in the assurance

system• Increased transparency

Product Categories• Mobile

Expand EPEAT Purchaser Base• US State & Local• Healthcare sector

Program Improvements• Standards Development Process• Assurance Model• CAB Ecosystem• Update EPEAT Registry

Product Categories• Network Equipment

Expand EPEAT Purchaser Base• EU Public & Private sector• Financial sector

Page 4: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

EPEAT Program Improvements: PXX Policy

• PXX is a new policy meant to address how EPEAT label criteria are developed

• EPEAT label criteria have and continue to be developed through balanced voluntary consensus standards

• PXX addresses identified EPEAT program challenges:

– EPEAT standards freely available for purchasers (addressed through GEC having IP ownership)

– Standards/criteria updated to meet purchaser expectations and reflect technology innovations (addressed through continuous maintenance process)

– EPEAT label covers technologies of interest to purchasers (addressed through timely standards development, assessment and revision process)

4 GEC Overview to ITI October 2017

Page 5: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

Key elements of draft PXX policy

• Standards developed through a balanced voluntary consensus process, as defined by US OMB A-119 (revised 2016)

Openness; Balance; Due process; Appeals; Consensus

• GEC requirements for SDO relationship– GEC will own IP for standards

– SDOs must have continuous maintenance process

• GEC role in standards development process– GEC will provide process support, including background research

– GEC will remain impartial in standard setting process

5 GEC Overview to ITI October 2017

Page 6: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

Product

Category2017 2018 2019 2020 2021

Computers/

Displays

Q3 – Open Registry to Public (IEEE) Q1 – Assess need for full revision

(as per new policy)

Q3—if revision needed, launch

under new process

Imaging

Equipment

Q1 – Assess need for full revision

(as per new policy)

Q3--if revision needed, launch

under new process

Earliest potential

publication of

revised standard

Televisions Q1 – Assess need for full revision

(as per new policy)

Q3--if revision needed, launch

under new process

Earliest potential

publication of

revised standard

Mobile

Phones

Q3 – Open

Registry to

Public (UL)

Continuous maintenance under UL Continuous

maintenance under

UL

Q1 – Assess need

for full revision

(as per new

policy)

Earliest potential publication of

revised standard

Servers Q2 – Open Registry to Public (NSF) Continuous

maintenance under

NSF

Continuous

maintenance under

NSF

Q1 – Assess need for full revision

(as per new policy)

Network

Equipment

Q1 – Initiate SDO process Q4 – Open Registry

to Public (~6

months after

publication)

Q2 – Assess need for full revision

(as per new policy)

Common

Criteria

Q1 – initiate SDO process Q4 – Application in

EPEAT (~6 months

after publication)

EPEAT Product Category launch and revision timeline

6 GEC Overview to ITI October 2017

Page 7: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

7 GEC Overview to ITI October 2017

EPEAT Advisory Council Follow-up Calls

Calls occur 9am Pacific and will be recorded and available online

• March 21

• June 19

• Sept 19

• Nov 20

Page 8: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

8 GEC Overview to ITI October 2017

EPEAT Category Update: Servers

• Server standard published

• Sept-Oct.: GEC approval process

– Public feedback now

Tentative timeline for implementation

• January 2018: Training for CABs

o CABs and Manufacturers can start Desk Review/assurance

process as soon as January 2018

• March 2018: Registry opens to manufacturers

• June 2018: Registry opens to the public

Page 9: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

9

New EPEAT Category: Network Equipment

• Beyond the initial EPEAT Technology Roadmap– Changing technology landscape

– New purchasing trends (hardware versus “service”)

• GEC’s Process for Evaluating New Products/Services– GEC completes business case

– Business case criteria include: purchaser demand, product/service sustainability gains, product availability

• Network Equipment as EPEAT Product Category– Business case completed

– Completing SDO agreement (assume completion by Nov. 2017)

GEC Overview to ITI October 2017

Page 10: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

10

Extending EPEAT Purchaser Base

What are Cooperative Agreements & Group Purchasing Organizations?

Cooperative Agreements (COOP) – A purchasing vehicle that aggregates public demand from more than one jurisdiction or entity. Pricing terms and requirements are typically shared amongst participating entities.

Group Purchasing Organizations (GPO) – Entity that leverages purchasing power of a group of businesses often in healthcare, manufacturing, agricultural industries, etc.

GEC Overview to ITI October 2017

Page 11: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

11

US States Cooperative Purchasing

NASPO ValuePoint:

➢Cooperative Purchasing arm for the 50 states and territories

➢$12B portfolio

NVP Portfolios: Q3 Engagement

➢ Computers $2.3B

➢ Copiers $135M

➢Wireless Communication ~$6B

GEC Overview to ITI October 2017

Page 12: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

12

Healthcare GPOsPremier, Vizient, and HealthTrust are three dominant GPOs, representing upwards of 90% of GPO market.

Premier: • 3,750 Hospitals• ~$48B in spendQ3-4 Activities/2018:• Member Pilot with Mindclick• Green e-purchasing platform

HealthTrust• 1,400 Hospitals• ~$28B in spendQ3-4/2018 Activities:

• Presenting to HealthTrust Membership committee Nov.

Vizient: • 5,200 Hospitals• ~$60B in spendQ3-4/2018 Activities:

• Monthly meetings

GreenHealthXChange • Practice Green Health• Spend UnknownQ3-4 Activities/2018:• IT focused Portfolio to-be-developed

in 2018

GEC Overview to ITI October 2017

Page 13: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

13

GEC 2017 Projects UpdateProject Update

Purchasers Guide to Labor & Human Rights Impacts in IT Procurements

• First round of interviews complete• Group review: ITI, EICC, BSR (all in October)• Finalize and “launch” at Geneva UN Forum on Business and Human

Rights (November)

State of Sustainable IT Procurement Report

• Last two weeks of interviews • Launch at BSR conference (October)

India Projects 1. Book Chapter: Draft completed; publication end of year2. End-of-Life capacity building criteria: engaged in interviews; results

featured at CRB conference in India (November)

Sustainability Through Cloud Computing

• Agreement with ASU Master’s Program in Business Analytics (Spring semester, 2018); part of BSR Future of the Internet initiative

EPEAT and GRI Guidance

• GRI guidance complete, quote from Chief Executive• Webinar planned

EPEAT and CDP Guidance

• Expected completion end of OctoberGEC Overview to ITI October 2017

Page 14: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

14

GEC 2018 Projects PreviewProject Update

Purchasers Guide to Labor & Human Rights Impacts in IT Procurements

• Pilot the Guide with two Public and Private purchasers

State of Sustainable IT Procurement Report

• Launch second edition Fall 2018

India Projects • Support Fellowship at Center for Responsible Business (CRB) focused on end-of-life management of IT products

Sustainability Through Cloud Computing

• Agreement with ASU Master’s Program in Business Analytics (Spring semester, 2018)

• Finalize purchaser guidance by Summer 2018

Purchaser Guide: SDGs and IT Sector

• Develop guide that educates purchasers on SDGs, highlights those most relevant based on IT brands commitment and reporting ability

GEC Overview to ITI October 2017

Page 15: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

15

Questions or Comments?

GEC Overview to ITI October 2017

Nancy Gillis, GEC CEO

[email protected]

Melanie Bower, EPEAT Program Director

[email protected]

Page 16: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

GEC Purchasers Guide for Addressing Labor and Human

Rights Impacts in IT ProcurementsOctober 2, 2017

Page 17: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

17

Guide Overview

GEC Overview to ITI October 2017

• Developed for Institutional Purchasers

• Addresses institutional purchasers’ “expectations” of how IT

product suppliers can/are/should address labor and human

rights impacts in their supply chain

• Based on Regulatory Landscape Analysis, Interviews

(individual & group) with Purchasers/Brands, and Human

Rights experts review

• Working collaboratively with EICC and Electronics Watch

• Focus is to provide:

– Questions for use by purchasers in procurement process

– Baseline performance expectation

– Best practice performance expectation

– Examples of verification documentation

Page 18: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

18

1. Communicating labor and human rights

expectations throughout the supply chain

GEC Overview to ITI October 2017

Question Baseline Verification

Does your company have a written supplier code of conduct or policy in place that addresses, at a minimum these eight issues: child labor; forced labor; working hours, wages; discrimination; health and safety; freedom of association and collective bargaining and disciplinary practices /humane treatment of workers?

Publicly available Supplier Policy or Supplier Code of Conduct that addresses these eight issues.

The Code of Conduct or Policy requires compliance with local or national regulations (whichever is stricter to provide better protection for workers).

Suppliers that the company has a direct contractual relationship with are required to adhere to the Code or policy.

Suppliers are made aware of the Code of Conduct or Policy

Copy of the company supplier code of conduct, supplier principles or industry code of conduct. Companies that are EICC members or Joint Audit Cooperation (JAC) members meet this baseline expectation.

Companies that require their suppliers to have SA8000 certification meet this baseline expectation.

Companies who reference the International Labor Organization (ILO) Core Conventions should also have additional policies addressing wages, working hours and health & safety since these issues are not covered in the ILO Core Conventions.

Copy of contract, supplier terms and conditions or other legally binding agreement detailing requirements for suppliers to adhere to

supplier/industry code of conduct or policy.

Page 19: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

19

Additional Questions 2 - 5

GEC Overview to ITI October 2017

2. Has your organization developed a process to identify

labor and human rights risks in your supply chain?

3. How is your company assessing your suppliers’

performance against your code of conduct or policy on

labor and human rights impacts?

4. How is your company using the outcomes of the

supplier risk screening and assessment process to

ensure suppliers are implementing corrective actions in a

timely manner?

5. How is your company engaging with suppliers to

ensure continuous improvement in supplier performance

against your Code of Conduct or Supplier Policy?

Page 20: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

20

Additional Questions 6 - 10

GEC Overview to ITI October 2017

6. How is your company engaging with suppliers to build their

capacity for addressing human and labor rights impacts?

7. What steps is your company taking to publicly communicate

and/or report your progress on addressing labor and human

rights within your supply chain?

8. How are you collaborating with external organizations –

NGOs, research, advocacy, governments - to address labor

and human rights impacts in your or IT sector supply chains?

9. How does labor and human rights performance of suppliers

integrate into the direct spend sourcing decisions of your

organization?

10. What steps are you taking to address labor and human

rights impacts during the extraction phase of production?

Page 21: GEC Update to ITI ELCQ2 –Assess need for full revision (as per new policy) Common Criteria Q1 –initiate SDO process Q4 –Application in EPEAT (~6 months after publication) EPEAT

21

Questions or Input?

GEC Overview to ITI October 2017

Nancy Gillis, GEC CEO

[email protected]

Melanie Bower, EPEAT Program Director

[email protected]