NIST has released two draft NISTIRs for the National Cybersecurity Online Informative References (OLIR) Program: Draft (2nd) NISTIR 8278 and Draft NISTIR 8278A. The comment period for each publication closes September 4, 2020.
Summary:
NIST is seeking public comments on two draft NISTIRs for the National Cybersecurity Online Informative References (OLIR) Program. This Program is a NIST effort to facilitate subject matter experts in defining standardized Online Informative References (OLIRs), which are relationships between elements of their documents and elements of other documents like the NIST Cybersecurity Framework. The draft reports focus on 1) OLIR program overview and uses (NISTIR 8278), and 2) submission guidance for OLIR developers (NISTIR 8278A).
The public comment period for both drafts is open through September 4th, 2020. See the publication details for a copy of the documents and instructions on submitting comments.
Details:
Draft (2nd) NISTIR 8278, National Cybersecurity Online Informative References (OLIR) Program: Program Overview and OLIR Uses. This report describes the OLIR Program: what OLIRs are, what benefits they provide, how anyone can search and access OLIRs, and how subject matter experts can contribute OLIRs. Based on feedback received from early adopters as well as discussions at the December 2019 OLIR workshop, this second draft includes:
Draft NISTIR 8278A, National Cybersecurity Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers. Upon final publication, this report will replace NISTIR 8204, Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template. The primary focus of 8278A is to instruct Developers on how to complete the OLIR Focal Document spreadsheet when submitting an Informative Reference to NIST for inclusion in the OLIR Catalog. Based on feedback received from early adopters as well as discussions at the December 2019 OLIR workshop, this revision includes:
NOTE: A call for patent claims is included on page iv of each draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.