Try the new CSRC.nist.gov and let us know what you think!
(Note: Beta site content may not be complete.)
Archived events
Past Events & Presentations
2015:
- August 26-27, 2015 - at NIST
- Agenda with Presentation Links
- Program with Speaker Photos and Bios
- Welcome from FCSM Chairperson
Patricia Toth, NIST - NIST Computer Security Division Update
Matthew Scholl, NIST, Computer Security Division Chief - How to Best Protect Against Future Cyber Incidents
Trevor H. Rudolph, Office of Management and Budget (OMB) - Implementing TIC E3A in Government and Using the XLA Threat Reduction and Correlation Tool (xTractTM)
Sandra Paul-Blanc, National Archives & Records Administration (NARA), - Government Accountability Office (GAO) Information Security Update
Gregory C. Wilshusen, U.S. Government Accountability Office (GAO) - NIST SP 800-163, Vetting the Security of Mobile Applications
Steve Quirolgico, NIST - Using Risk Management to Improve Privacy in Information Systems
Ellen Nadeau, NIST - Framework for Improving Critical Infrastructure Cybersecurity
Matthew Barrett, NIST - Mobile Application Security and PIV Derived Credentials
Jane Maples, National Aeronautics and Space Administration (NASA) - Rethinking Cybersecurity from the Inside Out: An Engineering and Life Cycle-Based Approach for Building Trustworthy Resilient Systems
Ron Ross, NIST Fellow - How FAA Required 50,000+ People to Use PIV Cards in 2 Months
Myles Roberts, Federal Aviation Administration (FAA) - Cloud Assessments
John Connor, NIST - The National Vulnerability Database (NVD)
Harold Booth, NIST - DOT Security Program Management Subcommittee’s Information Assurance Policy Working Group (IAPWG)
Kevin Sanchez-Cherry, Department of Transportation - Speak Out
Daniel Wood, Department of Treasury – Term & Topic: PKI Landscape
Pat Toth, NIST – Request for topics for FCSM FY16 meetings - IT Policy Initiatives Panel
Adam Sedgewick, NIST
William Fisher and Tim McBride, NIST, National Cybersecurity Center of Excellence (NCCoE);
Mike Garcia, NIST, National Strategy for Trusted Identities in Cyberspace (NSTIC) - US Census Bureau Risk Management Program Implementation
Jaime Lynn Noble, U.S. Census Bureau - Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) Program Overview
Martin Stanley, U.S. Department of Homeland Security (DHS)
August 26, 2015
August 27, 2015
- April 30, 2015 - at NIST
- National Cybersecurity Center of Excellence (NCCoE) Timothy J. McBride, NIST
- NIST SP 800-88 Rev 1, Guidelines for Media Sanitization
Andrew Regenscheid, NIST
- February 12, 2015 - at NIST
- Implementing the Privacy Controls from NIST SP 800-53 Rev 4, Appendix J Operationally Within DHS
Debra Danisek, Department of Homeland Security (DHS)
Jeff Gallucci, DHS - U.S. Government Configuration Baseline (USGCB)
Stephen Quinn, NIST
- Implementing the Privacy Controls from NIST SP 800-53 Rev 4, Appendix J Operationally Within DHS
2014:
- December 18, 2014 - at NIST
- Supply Chain
Susan Farrand, Department of Energy (DOE) - Einstein 3a Reporting Tool
Leo Scanlon, National Archives & Records Administration (NARA)
Farrokh Jahandari, Philip Kulp, William Weber, XLA.ALON
- Supply Chain
- August 19-20, 2014 - Off-site Meeting
- Agenda
- NIST Computer Security Division (CSD) Update
Matthew Scholl, NIST - FedRAMP Overview and Security Processes
Claudio Belloli, OCSIT General Services Administration (GSA) - Supply Chain
Celia Paulsen, NIST - Ongoing Authorization
Kelley Dempsey, NIST - Fiscal Service's Risk-Based ISCM Strategy
Ronald Hall, Jim McLaughlin, Michael Merrill, Bureau of Fiscal Service - Derived PIV Credentials
Hildegard Ferraiolo, NIST - GAO Information Security Update
Gregory Wilshusen and Larry Crosland, U.S. Government Accountability Office (GAO) - Cybersecurity Training
Robert A. Clarke, U.S. Department of State - Incident Response
Lee Badger, NIST - White House Initiatives (no slides)
John Banghart, The White House - FY15 FISMA Metrics
David Otto, DHS - Top Ten Myths: Q&A Session discussing all of the recent updates to the FISMA pubs
Ron Ross, NIST
- April 10, 2014 - at Department of Commerce
- Automated Assessment Practicals
Kelley Dempsey, NIST
Dr. George Moore, DHS - Automated Assessment Concepts Supporting ISCM
Kelley Dempsey, NIST
Dr. George Moore, DHS - NIST's Role in Ongoing Assessments
Kelley Dempsey, NIST
Dr. George Moore, DHS - Ongoing Authorization Clarifying and Amplifying Guidance
Kelley Dempsey, NIST
Dr. George Moore, DHS
- Automated Assessment Practicals
- February 20, 2014 - at SEC
- Agenda
- Controlled Unclassified Information (CUI) Implementation Activities
Patrick Viscuso, Ph.D, NARA - Cross Agency Priority (CAP) Goals
John Banghart, NSC
2013:
- December 12, 2013 - at NIST
- October 10, 2013 – CANCELLED due to shutdown
- August 8, 2013 - at Department of Commerce
- NIST Special Publication 800-53, Revision 4 and
The Fundamentals of Continuous Monitoring
(NOTE: Continuous Monitoring slides start at slide #55)
Ron Ross, NIST - Risk Management Framework – Case Studies
(NOTE: Slides are not available for this panel.)
Leo Scanlon, NARA, Moderator
Tim Ruland, Census
Pete Gouldmann, State Department
Earl Crane, Promotory Financial Group
Melinda Rogers, USDOJ
Peter Williams, BAH - Ongoing Authorization – Case Studies
Jeff Eisensmith, DHS, Moderator
Emery Csulak, DHS
Sharon Jurado, TSA
Alex Ruiz, ICE
- NIST Special Publication 800-53, Revision 4 and
- June 4-5, 2013 : (Offsite Meeting)
- NIST Computer Security Division Update (Provided by Division's 5 Group Managers)
- Lily Chen, Cryptographic Technology
- Lee Badger, Security Components and Mechanisms
- David Ferraiolo, Secure Systems and Applications
- Kevin Stine, Security Outreach and Integration
- Michael Cooper, Security Testing, Validation & Measurement
- IT Security Concerns During a Consolidation (Merger)
Jim McLaughlin, U.S. Department of Treasury, Bureau of the Fiscal Service - National Vulnerability Database (NVD)
Harold Booth, NIST - Executive Order 13636: Improving Critical Infrastructure Cybersecurity
Kevin Stine, NIST - GAO Information Security Update
Gregory Wilshusen and Anjalique Lawrence, Government Accountability Office - Supply Chain Risk Management Activities
Celia Paulsen, NIST - Special Publication 800-53, Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations
Ron Ross, NIST - Continuous Monitoring
L. Arnold Johnson, NIST - FedRAMP Activities
Matt Goodrich, GSA - Industrial Control Systems Security
Vicky Yan-Pillitteri, NIST
- NIST Computer Security Division Update (Provided by Division's 5 Group Managers)
- April 11, 2013 - at NIST
- Policy Machine: Enabling an Enterprise-wide, Data Centric Computing Environment
David Ferraiolo, NIST - National Cybersecurity Center of Excellence (NCCoE); and Demo On Trusted Geolocation in the Cloud
Karen Waltermire and Mike Bartock, NIST
- Policy Machine: Enabling an Enterprise-wide, Data Centric Computing Environment
- February 13, 2013 - CANCELLED
2012
- Census Risk Management Program Implementation
Jaime Noble, Census Bureau - Use of Cybersecurity Function Codes
Harold Welch, Office of Personnel Management (OPM)
- PIV Implementation
Daniel Wood, Treasury - Electricity Subsector Cybersecurity Risk Management Process
Marianne Swanson, NIST, Scott Saunders, SMUD, and Matthew Light, DOE
Agenda
- NIST Cyber Security Update
Matthew Scholl, NIST - GAO Information Security Update
Gregory Wilshusen, Government Accountability Office and Anjalique Lawrence, GAO - Basic Input/Output System (BIOS) Security
Andrew Regenscheid, NIST - Evolving Cybersecurity Strategies: NIST Special Publication 800-53 Rev 4
Ron Ross, NIST - Incident Handling and Reporting
Thomas Millar, US-CERT and Paul Cichonski, NIST - Cryptographic Module Validation Program (CMVP): FIPS 140-2, Security Requirements for Cryptographic Modules
Kim Schaffer, NIST - Supply Chain Risk Management
Jon Boyens, NIST - Implementing Appendix J Privacy Controls
Shelly Nuessle, Department of Transportation - Tackling Big Data
Michael Cooper and Peter Mell, NIST - National Initiative for Cybersecurity Education – Opportunities for Engagement
William Newhouse, NIST - Agency Cloud Implementation Case Study
Kurt Garbars, General Services Administration
- Federal Risk and Authorization Management Program (FedRAMP)
Matt Goodrich, GSA to the FedRAMP - NIST Special Publication 800-63-1
Elaine Newton and Ray Perlner, NIST
2011
- Federal PKI Security Profile
Matt King, Protiviti (on behalf of GSA) - Combinatorial Methods in Software Testing
Rick Kuhn, NIST Computer Security Division
- Telework Reference Architecture
Oscar Ahumada, DHS - NARA’s Controlled Unclassified Information (CUI) Implementation Guidance for Executive Order 13556
Patrick Viscuso, NARA
- NIST’s Work in Mobile App Security
Jeff Voas, NIST
Agenda (updated 6/13/2011)
Bethesda North Marriott Hotel & Conference Center
- Application Security in the SDLC
Terry Fletcher, FAA - Application Security Costs
Tim Howard, NOAA
- Security Information Standardization and Automation
John Banghart, NIST
2010
- FISMA Annual Reporting Process Report – Matt Coose and Doug Andre, DHS
-
Information Security Continuous Monitoring (Ongoing Monitoring in Support of Organizational Risk Management), NIST SP 800-137
Arnold Johnson, NIST -
An Enterprise Continuous Monitoring Technical Reference Architecture
Peter Mell, NIST
- Federal Virtual Training Environment (FedVTE) & Federal Cybersecurity Training Exercise (FedCTE)
Benjamin Scribner, DHS - Supply Chain Risk Management
Marianne Swanson, NIST
2009
Measure More, Spend Less on the Way to Better Security – John Streufert, U.S. Department of State
Presentations for the following events are located on the MAX Portal:
- C&A Cost Estimation Workshop
- 2009 Annual Offsite Meeting
The files are in the E-Government Community under the ISSLOB then under the FCSM. If you are a U.S. Federal Government employee, you can request a MAX account by going to the following URL:
https://max.omb.gov/maxportal/registrationForm.do