Workshop on Cybersecurity Online Informative References

Tuesday, December 3, 2019

The National Institute of Standards and Technology (NIST) invites you to attend a Cybersecurity Online Informative Reference (OLIR) workshop which will be held on December 3rd, 2019, at the National Cybersecurity Center of Excellence.

NIST invites industry subject matter experts and early adopters to share their views of the OLIR program, discuss potential opportunities and challenges affecting authoritative cybersecurity data-mapping, and offer industry-recommended practices for correlating cybersecurity-related data.

Purpose

The purpose of this NIST OLIR cybersecurity workshop is to present the NIST Cybersecurity Online Informative References Program, the reference data currently and potentially generated for the repository, highlight the work of early adopters, identify existing industry recommended practices for correlating cybersecurity-related data, and understand potential opportunities and challenge areas affecting authoritative cybersecurity data-mapping. The findings from the workshop will inform the development of the OLIR reference repository and NIST guidance for the use and adoption of these data resources.

The three main drivers for the OLIR program are also its primary objectives: 1) to apply greater scientific and mathematical rigor to cybersecurity guidance, 2) to create an integrated and actionable NIST guidance reference resource inclusive of maintained data sources, and 3) integrate NIST-supported United States Government (USG) legislative and administrative project responsibilities. By achieving these main drivers, the program creates a more standards-based, consumable reference set of NIST guidance as related to itself and other government, industry, and academia-produced cybersecurity products, guidance, services, and education.

Background                  

At its core, the OLIR program provides a forum and format for cybersecurity subject matter experts to make mathematics and logic-based relationship assertions between their framework, document, or product and the Cybersecurity Framework (CSF) in a simple format defined by NIST Interagency Report (IR) 8204, Cybersecurity Framework Online Informative References (OLIR): Specification for Completing the OLIR Template, which was established to provide guidance to Informative Reference developers for completing and submitting Informative References for inclusion within the OLIR catalog.

At the workshop, NIST will introduce the OLIR program and the associated processes and procedures documented within NISTIR 8204 as well as highlight existing Informative Reference data within the OLIR catalog from early adopters. NIST will gather feedback regarding the current instructions and definitions detailed within the NISTIR and use this information to mature the evolution of the OLIR catalog and current and future guidance. 

Questions about the workshop should be sent to: cyberframework-refs@nist.gov

Registration is Open

To register for this free workshop, please complete this short form by November 26th, 2019.  The workshop will be limited to 100 registrants.

For our international visitors, registration is suggested as soon as possible to allow for the registration process. Please download the file and fax the hard copy to (301-975-8670). Once the form has been faxed, email katie.macfarland@nist.gov to confirm receipt.

 

DETAILS

Date: Tuesday, December 3rd, 2019

Time: 9:30 a.m. – 12:00 p.m.

Location: National Cybersecurity Center of Excellence, 9700 Great Seneca Hwy, Rockville, MD 20850

 
AGENDA

8:30am – 9:00am

Check-in, NCCoE Lobby

9:00am – 9:10am

Welcome & Introduction to NIST

9:10am – 9:40am

Online Informative Reference (OLIR) Program Briefing

9:40am – 9:50am

Program Briefing Q & A

9:50am – 10:30am

Executive Panel - Ongoing Federated Control Mapping - Liberating the data

10:30am – 10:45am

Break

10:45am – 11:30am

Technical Panel - Perspective from OLIR Program Early Adopters

11:30am – 12:15pm

Industry Panel - Perspective from Industry Partners Panelists

12:15pm – 12:30pm

Closing Remarks and Q&A

12:30pm

End of Workshop