2005 INCITS Technical Committee Officers Symposium

1
2005 INCITS Technical Committee Officers
Symposium

• July 11th 12th
• Las Vegas, Nevada
• Cyber Security
• Dan Benigni, NIST Alternate to INCITS EB
• (Michael Hogan, NIST,Interim Convener of INCITS
  CS1)

2
New TC

• Effective April 5, 2005, the INCITS Executive
  Board has established INCITS Technical Committee
  CS1 on Cyber Security 
• INCITS/CS1 is designated as the US TAG for
  ISO/IEC JTC 1/SC 27 and all SC 27 Working Groups
  except WG 2 (INCITS T4 will serve as the US TAG
  to SC 27/WG 2).  
• Transfer of US TAG assignments occurred after the
  close of the first meeting of CS1 on June 8,
  2005.

3
TC Scope

• The INCITS CS1 area of work includes
  standardization in the following areas 
• Management of information security and systems
• Management of third party information security
  service providers
• Intrusion detection
• Network security
• Incident handling

4
TC Scope

• The INCITS CS1 area of work (continued) 
• IT Security evaluation and assurance
• Security assessment of operational systems
• Security requirements for cryptographic modules
• Protection profiles
• Role based access control
• Security checklists
• Security metrics

5
TC Scope

• The scope of INCITS CS1 explicitly excludes the
  areas of work on cyber security standardization
  presently underway in INCITS B10, M1, T3, T10,
  and T11 as well as other standard groups, such
  as ATIS, IEEE, IETF, TIA, and X9.
• INCITS T4's area of work is narrowed to
  cryptography projects in ISO/IEC JTC 1/SC 27 WG 2
  (Security techniques and mechanisms).

6
Cyber Security Standards Activities
June 9, 2004
International
ISO
IEC
ITU
IETF
ICAO
ISOTC 68
ISO/IEC JTC 1
SC 2
SC 6
SC 17
SC 27
SC 37

WG 1
WG 2
WG 3
National
ANSI
X9, Inc.
INCITS
IEEE
M1
B10
T3
T4
X9F
CS1
7
Initial Membership

• From the organizational meeting of CS1, the
  initial membership includes
• Voting Members 30
• Advisory Members - 1

8
Significant Accomplishments

• New TC to be determined

9
Significant Challenges

• New TC to be determined.

10
Expected Challenges

• Consideration of CS1 Standing Task Groups to
  progress the national and international program
  of work.
• Developing and promoting US contributions for the
  SC 27 information security management system
  standards (e.g., newly renumbered 27000 series,
  NP on identity management framework).
• Developing US positions on the reorganization of
  SC 27. (SC 27 has established an AHG to develop
  a report on its future organization, for
  discussion at its May 2006 meeting.)

11
Liaison Activities

• New TC - to be determined.

12
Future Trends and Related Technical Activities

• The recommendations of the National Cyber
  Security Partnerships (NCSP) Technical Standards
  and Common Criteria Task Force1 identify the
  spectrum of cyber security standards that will be
  needed to maintain the confidentiality, integrity
  and availability of computers, networks and
  information therein.
• The ISO Advisory Group on Security (AGS) has
  recognized the central importance of cyber
  security and the central role of ISO/IEC JTC 1/
  SC 27, IT Security Techniques, to ensure that all
  aspects of cyber security standardization are
  being progressed in a timely fashion.

13
Meeting Schedule

• July 28, 2005 - CS1 Special Meeting on SC 27 NP
  Ballots (teleconference 10 am to 3 pm (EDT))
• August x, 2005 - CS1 AHG on WD 27004
  (teleconference)
• September 27 28, 2005 - CS1 Meeting (ITI,
  Washington, DC)
• November 7 - 11, 2005 - SC 27 WG Meetings Kuala
  Lumpur, Malaysia
• May 8 - 12, 2006 - SC 27 WG Meetings, Madrid,
  Spain
• May 16 - 17, 2006 - SC 27 Plenary Meeting,
  Madrid, Spain
• November 13 - 17, 2006 - SC 27 WG Meetings, South
  Africa

14
How Can We Help?

• New TC - to be determined.