Great question! Itâs almost as hard to explain NIEM to CTI as it is to explain CTI to NIEM
😊.
Overall info on OASIS NIEMOpen project is at
https://niemopen.org. The overall GitHub page is
https://github.com/niemopen which has a readme with links
The project has a PGB (https://lists.oasis-open-projects.org/g/niemopen-pgb) of the sponsors (see
https://niemopen.org/ and scroll down to premier and general sponsors â Jeff it your case you might not DoD Joint Staff is on PGB), but work is done in 3 Technical Steering Committees which are open to all:
- NTAC (NIEM Technical Architecture Committee) Technical Steering Committee
- https://lists.oasis-open-projects.org/g/niemopen-ntactsc
- has links to calendar, mailing list archives, etc
- https://github.com/niemopen/ntac-admin
- Github repo with docs. Readme explains what it does. Basically the architecture and things like XML, JSON, structure of the model, etc
- Note Jim Cabral is one of cochairs and also member of cti
- NBAC (NIEM Business Architecture Committee ) Technical Steering Committee
- https://lists.oasis-open-projects.org/g/niemopen-nbactsc
- Has links to calendar. Mail list archives, etc
- https://github.com/niemopen/nbac-admin
- Github repo with docs. Readme explains what it does. But this is where the 17 domains live â with cyber being one of the domains.
- NMO (NIEM Management Office) Technical Steering Committee
- https://lists.oasis-open-projects.org/g/niemopen-nmotsc
- has links to calendar, mailing list archives, etc
- https://github.com/niemopen/nmo-admin
- Github repo with docs. Bascially the people herding cats
--
Duncan Sparrell
sFractal Consulting
iPhone, iTypo, iApologize
I welcome VSRE emails. Learn more at http://vsre.info/
From:
MATES, JEFFREY F CIV USAF AFOSI AFOSI/DC3/XT <jeffrey.mates@us.af.mil>
Date: Tuesday, August 22, 2023 at 1:15 PM
To: duncan sfractal.com <duncan@sfractal.com>
Subject: RE: [cti] CTI interest in NIEM?
Stupid question, but where I can get the information about the NIEM Zoom meetings?
//SIGNED//
Jeffrey Mates, Civ DC3/TSD
Computer Scientist
Technical Solutions Development
From: cti@lists.oasis-open.org <cti@lists.oasis-open.org>
On Behalf Of duncan sfractal.com
Sent: Tuesday, August 22, 2023 12:19 PM
To: Jason Keirstead <jason.keirstead@cyware.com>; Vasileios Mavroeidis <vasileim@ifi.uio.no>; MATES, JEFFREY F CIV USAF AFOSI AFOSI/DC3/XT <jeffrey.mates@us.af.mil>
Cc: 'Jim Cabral' <Jim.Cabral@infotrack.com>; 'cti@lists.oasis-open.org' <cti@lists.oasis-open.org>
Subject: [Non-DoD Source] Re: [cti] CTI interest in NIEM?
To Jasonâ comment âif the goal would be to adopt NIEM inside STIX itselfâ â I donât think anyone is proposing that (caveat below). NIEM is the standard the
USG, itâs allies, state/local/tribal/territorial govs use for interacting within themselves, between each other, and with industry. Objective is to get NIEM to take advantage of STIX.
NIEM is actually enshrined in a couple of US laws for US federal agencies to use it. Itâs been going on for 20 years as a USG effort and recently (~1 year ago) moved into open standards development.
In many domains, itâs active and in use. Cyber, for whatever reasons, doesnât have many people working on it. Since it has been around awhile, it is technologically dated IMHO. For example, it is XML based, and is in process of allowing JSON but still with
XML as base (ie you specify in XML and convert to JSON-LD). Itâs not that people donât want to move forward â but someone has to do the work.
My only caveat on Jasonâs comment would be if NIEM were to choose to use terms/semantics etc that were not the same as STIX, then it could cause interworking issues â particularly IMHO wrt legal/court/law-enforcement.
So my hope is we can keep them in sync â but it takes effort and someone has to do it.
Thank you to those offering to help out. I hope to see you at on future NIEM zooms.
--
Duncan Sparrell
sFractal Consulting
iPhone, iTypo, iApologize
I welcome VSRE emails. Learn more at http://vsre.info/
From:
Jason Keirstead <jason.keirstead@cyware.com>
Date: Tuesday, August 22, 2023 at 8:51 AM
To: Vasileios Mavroeidis <vasileim@ifi.uio.no>, MATES, JEFFREY F CIV USAF AFOSI AFOSI/DC3/XT <jeffrey.mates@us.af.mil>
Cc: 'Jim Cabral' <Jim.Cabral@infotrack.com>, duncan sfractal.com <duncan@sfractal.com>, 'cti@lists.oasis-open.org' <cti@lists.oasis-open.org>
Subject: Re: [cti] CTI interest in NIEM?
I think the question is going to be around the goal of the effort. If the effort surrounds a mapping or ontological exercise to/from NIEM, I am sure no one in the TC would be against that work
product, it could be a great resource if someone wanted to take on that work, they can fill their boots. However, if the goal would be to adopt NIEM inside STIX itself, I think that would be a very, very long hill to climb and you will encounter a lot of resistance
â it would be a lot of work and more importantly a huge industry disruption for questionable benefit to the end consumer.
--
Jason Keirstead
Vice President of Collective Threat Defense
jason.keirstead@cyware.com
Disclaimer ***************** This email contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by email and delete the original message. Further, you
are not to copy, disclose, or distribute this email or its contents to any other person and any such actions are unlawful.
You should carry out your own virus checks before opening the email or attachment. Cyware Labs
reserves the right to monitor and review the content of all the messages sent to or from this email address. Messages sent to or from this email address may be stored on the Cyware's email system. *** ******** End of Disclaimer ********