Information Security & Occasional Forays Into Adjacent Realms
via Cynthia Brumfield's superlative screed and published by Cyberscoop aka The Nippon File. Enjoy!
"The appeal of NIST’s Cybersecurity Framework was so strong in Japan that the country’s Information Technology-Promotion Agency, or IPA, became the first foreign entity to translate the Framework fully from its English language version into another language in 2014." - via Cynthia Brumfield's Why NIST Is So Popular In Japan? published on Cyberscoop
The National Institute of Standards and Technology (NIST) National Center for Cybersecurity Excellence (NCCOE) has released it's latest draft medical device related security document, entitled 'NIST Special Publication 1800-8 Cybersecurity Special Publication 1800-8 Securing Wireless Infusion Pumps - In Healthcare Delivery Organizations'. Authored by Gavin O'Brien, Sallie Edwards, Kevin Littlefield, Neil McNab, Sue Wang and Kangmin Zheng - the document is available as either a PDF or web-based artifact. Enjoy.
"Medical devices, such as infusion pumps, were once standalone instruments that interacted only with the patient or medical provider. With technological improvements designed to enhance patient care, these devices now connect wirelessly to a variety of systems, networks, and other tools within a healthcare delivery organization (HDO) – ultimately contributing to the Internet of Medical Things (IoMT)." - via the National Center for Cybersecurity Excellence (NCCOE)
The NCCoE has announced a new NIST Cybersecurity Practice Guide (currently in draft mode - for your commenting pleasure...) and entitled - "SP 1800-7 Situational Awareness for Electric Utilities. Enjoy.
News, from the National Cybersecurity Center of Excellence (NCCOE) at the National Institute of Standards and Technology (NIST), detailing updates in a wide range of sectors.
Of interest is the Center's Building Block Updates. Comprised of DNS-Based Secured Email and Derived PIV Credentials, the NCCOE is certainly moving forward (as opposed to executing a flawed mandate laterally, as many Agencies appear to be orchestrating as of this writing...) as we had hoped for at the inception of the Center of Excellence. Outstanding!
Earlier this month (in April 2015 if you are reading this post in the far distant future...) the National Institute of Standards and Technology (NIST) released NIST Draft NISTIR 8050; in which, an interesting summary appears of a technical workshop held at Stanford University in conjuction with the Presidents' Cybersecurity Summit.
Pursuant to completeing the draft cycle of the document, the National Cybersecurity Center of Excellence NNCoE (a Center of Excellence and a component of NIST) has issued a Call for Comments, focusing on the content of that document. In this instance, related to your agency, company, buereau, department, country or other organizations' information and/or cybersecurity issues. I've included a link to NISTIR 8050 to assist in fulfilling the Call for Comments. Enjoy.
The National Cybersecurity Center of Excellence has issued an invitation for the first talk in the new years' NCCoE Speaker Series, slated for January 14th, 2015. The Center has scheduled Chris Inglis, currently a venture partner with the Paladin Capital Group [Mr. Inglis' previous line of work was as the Deputy Director of the National Security Agency from 2006 to 2014]. If you are in the Rockville vicinity, the Speaker Series is a highly regarded event.