NIST Announces ISPAB Meeting

Today the National Institute of Standards and Technology published a meeting notice in the Federal Register (81 FR 9169-9170) for a 3-day public meeting of the Information Security and Privacy Advisory Board (ISPAB) starting on March 23^rd, 2016 in Washington, DC. There is no indication that there will be a web cast of the sessions.

The agenda for the meeting includes:

• Presentation from DHS, National Protection and Programs Directorate,

• Updates on OMB Circular No. A-130 Revised, Management of Federal Information Resources,

• Legislative updates relating to security and privacy,

• Overview on Information Sharing and Analysis Organization (ISAO), information sharing in the communications sector, and the Communications Security, Reliability and Interoperability Council (CSRIC),

• Briefing from the DOC, Office of Chief Data Officer,

• DHS, National Cybersecurity Assessment and Technical Services briefing on penetration testing,

• Discussion on password storage with Federal Chief Information Officers,

• Presentation from American Council for Technology and Industrial Advisory Council (ACT-IAC) on Cybersecurity Ideation Initiative Report,

• FedRAMP Updates on “High” baseline security controls,

• Briefing on security and privacy relating to autonomous vehicles,

• Presentation on the United States Cybersecurity Research and Development Plan, and

• Updates on NIST Computer Security Division.

Registration will not be required to attend this meeting. There will be a short public comment period on March 25^th. Advanced registration for the limited public speaking times is suggested. Written comments may be submitted by snail mail to:

ISPAB Secretariat

Information Technology Laboratory

100 Bureau Drive, Stop 8930

National Institute of Standards and Technology

Gaithersburg, MD 20899-8930

Commentary

There are lots of interesting things going to be discussed here over a three-day period. It seems a shame that NIST cannot provide a web cast of the meetings. What seems ludicrous, however, is that written comments have to be submitted on paper via snail mail. I know that NIST does not like using the Federal eRulemaking Portal, but there should at least be an email address for submitting such comments.