Security and Privacy for CTS

[<elysajones@yahoo.com>]

Colleagues,

 

Please find attached the material I have gathered to respond to the “Security and Privacy” appendix in the CTS document.  There are six OASIS works with the relevant sections copied, each separated by “++++++++++++”.  Additionally, the link to the RFC 3552 can provide some insight. 

 

1. OData (Open Data Protocol) – Chapter 12
2. STIX (Structured Threat Information _expression_) – Appendix D (IANA)
3. CACAO (Security Playbooks) – Appendix B (IANA in Appendix C)
4. XACML (eXtensible Access Control Markup Language) – Chapter 8
5. Privacy Management Reference Model
6. COEL (Classification of Everyday Life)

 

We will discuss this on the next call and narrow down the approach to be used for the CTS specification.

 

Best regards,

 

Elysa Jones, Chair OASIS

Emergency Management Technical Committee

Emergency Member Section Steering Committee

 

Attachment: Security and Privacy examples for CTS.docx
Description: application/vnd.openxmlformats-officedocument.wordprocessingml.document