Open issues:

1. F8, F10 are not addressed with a secuirity control. There were not addressed in WAMPAC either.

2. S7 Specific failure unaddressed by a security control.

3. AC.05 This requirement might be inappropriate in the context of long polling.
4. Network Segmentation - what are the requirements?
DMZ or Firewall requirements?
Specific port identified? The resource would have to protect itself for access outside of this port for specific message types.
e.g. we expect to connect on 443 using https. or from specific IP address.
Don't dictate how the receiving party configures the network. 
Update section on segmentation.


5. SCP.04 (Applicable to Slow, Medium DR only) Not applicable to (or usable by) ancillary services.