Update on NIS Directive and TC CYBER Plenary

[Tony Rutkowski <tony@yaanatech.com>]

Hi all,

As we discussed earlier at the cti-interop
meeting  on the 8th, the convergence
CTI's work, the US Cybersecurity Act,
and the NIS Directive provides a unique
opportunity to position the CTI capabilities
as a common threat intelligence exchange
platform on both sides of the Atlantic and
beyond.

The "deconstruction" comparison we
discussed at the 8 June cti-interop meeting
seems to have resonated within multiple
venues in Europe.  With the official
Directive publication a few weeks
ago, the stage was set for what unfolded at
the ETSI TC CYBER plenary last week - namely
approval of a new work item enabling CYBER
to shape the NISD implementation.  See
https://portal.etsi.org/webapp/WorkProgram/Report_WorkItem.asp?WKI_ID=50116

The meeting also seemed to appreciate the
presentation on a cyber threat intelligence
update, and the Technical Report that highlighted
TC CTI's work was also approved for publication.
The approved pre-publication draft is attached.
The V1.1.1 published version should be available
within a week.

The OASIS-ETSI cooperative MoU that identifies
the TC CTI and TC CYBER relationship is a real
benefit here.  As the CTI specs attain maturity,
that MoU can potentially enable them to enjoy an
enhanced status for purposes of implementing
requirements like the NIS Directive. 

best,
tony

Attachment: draft_tr_103331v010001p_clean.docx
Description: application/vnd.openxmlformats-officedocument.wordprocessingml.document