I've had it pointed out to me that in order to contribute to the IEP-SIG, you need to have signed either the FIRST Uniform IPR, or the OASIS IPR (Intellectual Property Rights) agreements. My understanding is that the OASIS and FIRST Joint MOU allows OASIS and FIRST members to easily participate in each other's meetings, and that the IPR agreements are extended to each organization as well through this MoU.
For this reason, we recommend that all participants in the call should have signed either the OASIS or FIRST IPR forms (the FIRST IPR is preferred). If you have not signed either IPR forms, please visit the FIRST.org website, download and sign the FIRST Uniform IPR form, and then send it to first-sec@first.org.
You may join the call without signing the forms above, but you will not be able to contribute. Therefore we *strongly* recommend that you sign the FIRST Uniform IPR form if you wish to participate in the IEP-SIG.
If you have any questions, please feel free to contact me.
Cheers
Terry MacDonald | Chief Product Officer
On Wed, Aug 2, 2017 at 6:04 PM, Terry MacDonald <terry.macdonald@cosive.com> wrote:
Hi All,The FIRST Information Exchange Policy Special Interest Group (IEP-SIG) Co-Chairs are pleased to announce the creation of IEP 2.0.IEP 2.0 is the new updated version of the Information Exchange Policy, a protocol designed to allow information producers to unambiguously articulate what recipients of their information are permitted to do with the information they receive. IEP 2.0 brings the following improvements:
- The ability to reference IEP policies stored in network accessible locations
- STIX 2.1 JSON compatible structure
- A more defined lifecycle
We are holding a series of meetings to walk through the draft versions of IEP 2.0, to review and validate the work done so far. The ultimate aim is to finalize IEP 2.0 before the end of August 2017, so that it can be included as part of STIX 2.1, in order to manage the sharing of threat intelligence and promote future support for IEP by software vendors.The meetings will be held at the following times (meeting requests will be sent out separately):
- IEP-SIG IEPv2 Meeting 1: An hour-long meeting for Monday, 7 August 2017 at 3:00:00 p.m. PDT (see here for other timezones).
- IEP-SIG IEPv2 Meeting 2: An hour-long meeting for Monday, 14 August 2017 at 3:00:00 p.m. PDT (see here for other timezones).
- IEP-SIG IEPv2 Meeting 3: An hour-long meeting for Tuesday, 22 August 2017 at 3:00:00 p.m. PDT (see here for other timezones).
A reminder that anyone can participate in the IEP-SIG, including individuals and organizations who are not members of FIRST, and we would like a global representation and cross section of participants including National CERTs, incident responders, security vendors, community stewards, policy writers, and lawyers. If you would like to join the IEP-SIG then please email the FIRST Secretariat first-sec@first.org .Please find the following documents attached:
- The proposed draft of the FIRST IEP Framework 2.0 (pdf)
- The proposed draft of the FIRST IEP 2.0 JSON Specification (pdf)
- The proposed draft of the STIX 2.1 IEP 2.0 Data Marking Objects (pdf)
We look forward to your participation and contributions to initiative over the coming weeks.CheersTerry MacDonald | Chief Product Officer