NIST Announces ISPAB Meeting

Today the National Institute of Standards and Technology published a meeting notice in the Federal Register (81 FR 9169-9170) for a 3-day public meeting of the Information Security and Privacy Advisory Board (ISPAB) starting on March 23^rd, 2016 in Washington, DC. There is no indication that there will be a web cast of the sessions.

The agenda for the meeting includes:

• Presentation from DHS, National Protection and Programs Directorate,

• Updates on OMB Circular No. A-130 Revised, Management of Federal Information Resources,

• Legislative updates relating to security and privacy,

• Overview on Information Sharing and Analysis Organization (ISAO), information sharing in the communications sector, and the Communications Security, Reliability and Interoperability Council (CSRIC),

• Briefing from the DOC, Office of Chief Data Officer,

• DHS, National Cybersecurity Assessment and Technical Services briefing on penetration testing,

• Discussion on password storage with Federal Chief Information Officers,

• Presentation from American Council for Technology and Industrial Advisory Council (ACT-IAC) on Cybersecurity Ideation Initiative Report,

• FedRAMP Updates on “High” baseline security controls,

• Briefing on security and privacy relating to autonomous vehicles,

• Presentation on the United States Cybersecurity Research and Development Plan, and

• Updates on NIST Computer Security Division.

Registration will not be required to attend this meeting. There will be a short public comment period on March 25^th. Advanced registration for the limited public speaking times is suggested. Written comments may be submitted by snail mail to:

ISPAB Secretariat

Information Technology Laboratory

100 Bureau Drive, Stop 8930

National Institute of Standards and Technology

Gaithersburg, MD 20899-8930

Commentary

There are lots of interesting things going to be discussed here over a three-day period. It seems a shame that NIST cannot provide a web cast of the meetings. What seems ludicrous, however, is that written comments have to be submitted on paper via snail mail. I know that NIST does not like using the Federal eRulemaking Portal, but there should at least be an email address for submitting such comments.

NIST Announces Meeting of ISPA Board 6-12-13

Today the National Institute of Standards and Technology (NIST) published a public meeting notice in the Federal Register (78 FR 25254-25255) of the Information Security and Privacy Advisory Board. The three day meeting will begin on June 12^th in Washington, D.C.

Agenda

The Board will address issues related to the President’s recent cybersecurity executive order (EO 13636) including:

• Executive Order 13636, Improving Critical Infrastructure Cybersecurity;

• Development of New Cybersecurity Framework;

• Request for Information (RFI)—Developing a Framework to Improve Critical Infrastructure Cybersecurity (78 FR 13024, February 26, 2013);

• Notice of Inquiry (NOI)—Incentives to Adopt Improved Cybersecurity Practices (78 FR 18954, March 28, 2013),

Additional items on the agenda include:

• DHS Information Sharing Update;

• DHS - investigative discussion on reducing required reporting;

• US-CERT changing reporting categories; and

• Update of NIST Computer Security Division.

Public Participation

There will be a 30-minute period for public comments (limited to 5 minutes each on a first-come, first-serve basis) on Friday morning. Written comments from the public may also be submitted via snail mail (and this is NIST?) to:

ISPAB Secretariat

Information Technology Laboratory

100 Bureau Drive, Stop 8930

National Institute of Standards and Technology

Gaithersburg, MD 20899-8930