PRELIMINARY AGENDA Meeting of the Computer System Security and Privacy Advisory Board September 29-30, 1998 NIST NORTH, Room 618 [Note: NEW LOCATION] National Institute of Standards and Technology Gaithersburg, MD Tuesday, September 29, 1998 9:00 a.m. Welcome and Update Ed Roback, CSSPAB Executive Secretary 9:05 a.m. Chairman's Remarks Willis Ware 9:10 a.m. New Member Welcome and Introductory Remarks John Sabo Society Security Administration 9:30 a.m. Better Business Bureau Online Privacy Program Russell Bodoff, General Manager and Vice President BBBOnline, Inc. 10:10 a.m. BREAK 10:30 a.m. TRUSTe Briefing Roger Cochetti, IBM TRUSTe Board of Directors 11:30 a.m. FedCIRC Update Michael Smith, GSA 12:00 p.m. LUNCH 1: 30 p.m. Briefing on Self-Regulation, OECD and Federal Digital Signature Statutory Developments Mark Bohannon General Counsel Technology Administration, DOC 2:30 p.m. Federal Trade Commission's Consumer Online Privacy Report Ori Lev, Staff Attorney Division of Credit and Protection Federal Trade Commission 3:30 p.m. BREAK 3:45 p.m. Board Discussion Period 5:00 p.m. RECESS Wednesday, September 30, 1998 9:00 a.m. Board Discussion Period 10:00 a.m. Update on Health Care Issue and Pending Legislation John Fanning Department of Health and Human Services 11:00 a.m. General Motors' Privacy Policy Randy Sanovic, GM 11:30 a.m. Public Participation 12:00 p.m. LUNCH 1:30 p.m. NIST Updates - Computer Security Planning Guide Marianne Swanson - Training Initiative Fran Nielsen - Advanced Encryption Standard Ed Roback 2:45 p.m. Board Discussion and Planning for Next Meeting 4:00 p.m. ADJOURN