What are the minimal technical considerations a public agency needs, to implement a blockchain proof of concept or pilot project?

[afomi]

Goal

Create a checklist of capabilities with corresponding technical features (that can be implemented TODAY) that a public agency would need to have in place.

Technical prerequisites

• wallet software for public staff
  • manages keys
  • manages identity
• some blockchain somewhere (not necessarily run inside or by the public agency) (if the desire is to run the chain, that can be a separate project from the pilot)
• some method or service to retrieve specific types of data from a chain

Organizational and user considerations

• an ATO (or a path to it)
• some set of external users to put information into the system
• some set of external users that will consume information from the system

Existing guidance

• https://www.actiac.org/documents/blockchain-primer
• https://gbaglobal.org/bmm/

[afomi]

ATO Controls for consideration

https://csf.tools/reference/cloud-controls-matrix/v4-0/log/log-11/ https://csf.tools/reference/nist-sp-800-53/r5/au/au-2/ https://csf.tools/reference/nist-sp-800-53/r5/au/au-14/ https://csf.tools/reference/nist-sp-800-53/r5/au/au-16/