Revised Schedule for CTI TC Document Review

All,

During the CTI-TC Monthly Conference Call we announced a 29 July document freeze, at which point we intended to migrate the draft specifications into official OASIS templates in preparation for the formal comment period. However, over the past two weeks we have received a significant amount of substantive feedback. As the document editors have reviewed the many comments and suggestions, we have realized that some changes and additions are necessary. In light of this, the SC co-chairs and I have determined that the best course of action is to extend the initial review period prior to migrating the drafts into official OASIS templates. This extended review period is intended to ensure that we as a TC have ample time to make the necessary changes as we iterate towards final consensus. As always, our goal is to ensure that we produce the highest quality specifications possible. We believe that this additional review period will help us achieve that goal.

As the co-chairs discussed the revised timeline, we took into account the fact that many TC members will be attending BlackHat next week. As such, the revised timeline is as follows:

· STIX 2.0 document freeze: 19 August

· CybOX 3.0 document freeze: 02 September

· TAXII 2.0 document freeze: 16 September

We have staggered the document freeze dates across the three specifications. Our intention is to allow the TC to focus its attention on a single objective. This is not to say that all work stops on CybOX and TAXII while we're finalizing STIX, but it is nevertheless true that we can accomplish more when focused on a primary target. Please let us know if you have concerns with this amended review schedule.

On behalf of the SC co-chairs, I’d like to thank everyone for the time and effort that they have devoted to the development and refinement of these specifications and encourage everyone to keep up the good work as we near the finish line!

Regards,

Rich

Richard J. Struse

Chair, OASIS Cyber Threat Intelligence (CTI) Technical Committee

Chief Advanced Technology Officer

National Cybersecurity and Communications Integration Center (NCCIC) and

Stakeholder Engagement and Cyber Infrastructure Resiliency (SECIR)

Cyber Security & Communications

U.S. Department of Homeland Security

e-mail: Richard.Struse@dhs.gov
Phone: 202-527-2361

cti message