OpenCw wrt New CISA SBOM sharing work stream

openc2 message

Subject: OpenCw wrt New CISA SBOM sharing work stream

From: duncan sfractal.com <duncan@sfractal.com>

To: "TC OpenC2 (openc2@lists.oasis-open.org)" <openc2@lists.oasis-open.org>

Date: Thu, 18 Aug 2022 02:42:41 +0000

Attached is an invitation from CISA to join their new SBOM Sharing work stream. Note that OpenC2 is not mentioned in the 'listening session summary'. But note that PACE is explicitly called out as one of the potential sharing mechanisms, and recall PACE uses OpenC2 for command and control.

However, PACE won't actually make it into the proposed solutions unless advocated by participants in this workstream. So OpenC2 members may want to attend these meetings and advocate for PACE and thereby advocate for OpenC2.

iPhone, iTypo, iApologize

Duncan Sparrell

sFractal Consulting, LLC

I welcome VSRE emails. Learn more at http://vsre.info/

From: Friedman, Allan <allan.friedman@cisa.dhs.gov>
Sent: Wednesday, August 17, 2022 1:57:16 PM
To: SBOM <SBOM@cisa.dhs.gov>
Cc: Murphy, Justin <justin.murphy@cisa.dhs.gov>; Woodworth, Will <GORDON.WOODWORTH@cisa.dhs.gov>
Subject: New SBOM sharing work stream - calendar invite

Dear SBOM Community,

Thanks for your interest in how to share and exchange SBOMs. During July’s “listening sessions,” we heard strong support for CISA to continue to facilitate conversations and concrete, community-led efforts on this topic. Attached is a summary of the insights and potential activities that were suggested.

To help facilitate public collaboration among experts, CISA will help convene some initial discussions around next steps. These are just the initial conversations, and it will be up to the community to decide what this collaboration can look like, including how to collaborate and what to focus on.

Based on the recent doodle polls, the initial meetings will happen at the time below. We know that no time slot is perfect for everyone, and this will be inconvenient or impossible for many of you. We will work with the community to identify mechanisms to include everyone interested, including sharing notes or summaries.

SBOM Sharing Weekly Meeting

Mondays, 12pm ET

Teams link in the attached calendar invite.

The first few meetings will focus on reviewing potential activities that the community would like to see, as well as the optimal mechanisms for collaboration. If you cannot make these initial meetings, there will be plenty of time to share input and perspectives.

Please don’t hesitate to reach out if you have any questions.

allan

You are receiving this email because of interest expressed in CISA’s SBOM work, particularly around tooling and implementation. To subscribe or unsubscribe, please contact SBOM@cisa.dhs.gov

BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 16.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST X-MS-OLK-FORCEINSPECTOROPEN:TRUE BEGIN:VTIMEZONE TZID:Eastern Standard Time BEGIN:STANDARD DTSTART:16011104T020000 RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11 TZOFFSETFROM:-0400 TZOFFSETTO:-0500 END:STANDARD BEGIN:DAYLIGHT DTSTART:16010311T020000 RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3 TZOFFSETFROM:-0500 TZOFFSETTO:-0400 END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT ATTENDEE;CN="Friedman, Allan";RSVP=TRUE:mailto:allan.friedman@cisa.dhs.gov ATTENDEE;CN="Woodworth, Will";RSVP=TRUE:mailto:GORDON.WOODWORTH@cisa.dhs.go v ATTENDEE;CN="Stoddard, Jeremiah";RSVP=TRUE:mailto:jeremiah.stoddard@inl.gov CLASS:PUBLIC CREATED:20220817T150157Z DESCRIPTION: \n\n__________________________________________________________ ______________________ \n\nMicrosoft Teams meeting \n\nJoin on your comput er or mobile app \n\nClick here to join the meeting <https://teams.microso ft.com/l/meetup-join/19%3ameeting_MTM4MmE5NTEtNzI5ZS00NDUzLWEwODMtZDA5YzQ3 Zjk2ZDcw%40thread.v2/0?context=%7b%22Tid%22%3a%223ccde76c-946d-4a12-bb7a-f c9d0842354a%22%2c%22Oid%22%3a%22fdd063bd-5a3a-4383-b6a3-a4d0bf64f24f%22%7d > \n\nMeeting ID: 235 705 165 919 \nPasscode: FgMRgm \n\nDownload Teams < https://www.microsoft.com/en-us/microsoft-teams/download-app> | Join on t he web <https://www.microsoft.com/microsoft-teams/join-a-meeting> \n\nOr c all in (audio only) \n\n+1 202-516-6093\,\,934157496# <tel:+12025166093\,\ ,934157496#> United States\, Washington DC \n\nPhone Conference ID: 934 157 496# \n\nFind a local number <https://dialin.teams.microsoft.com/0f14 4dc4-5393-4cb8-be1f-727dab028df1?id=934157496> | Reset PIN <https://diali n.teams.microsoft.com/usp/pstnconferencing> \n\n <https://www.dhs.gov/sit es/default/files/2022-01/22_0131_OPA_DHS-Seal.png> \n\n* * * * * U.S. Depa rtment of Homeland Security * * * * * \n\nLearn More <https://aka.ms/JoinT eamsMeeting> | Meeting options <https://teams.microsoft.com/meetingOption s/?organizerId=fdd063bd-5a3a-4383-b6a3-a4d0bf64f24f&tenantId=3ccde76c-946d -4a12-bb7a-fc9d0842354a&threadId=19_meeting_MTM4MmE5NTEtNzI5ZS00NDUzLWEwOD MtZDA5YzQ3Zjk2ZDcw@thread.v2&messageId=0&language=en-US> \n\n____________ ____________________________________________________________________ \n\n \n\n DTEND;TZID="Eastern Standard Time":20220829T130000 DTSTAMP:20220816T191358Z DTSTART;TZID="Eastern Standard Time":20220829T120000 LAST-MODIFIED:20220817T150157Z LOCATION:Microsoft Teams Meeting ORGANIZER;CN="Murphy, Justin":mailto:justin.murphy@cisa.dhs.gov PRIORITY:5 RRULE:FREQ=WEEKLY;COUNT=18;BYDAY=MO SEQUENCE:0 SUMMARY;LANGUAGE=en-us:SBOM Sharing Weekly Meeting TRANSP:OPAQUE UID:040000008200E00074C5B7101A82E008000000000044EB6282B1D801000000000000000 010000000E3593BAF008B3840BB44368631DA06A1 X-ALT-DESC;FMTTYPE=text/html:<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-mic rosoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/ 12/omml" xmlns="http://www.w3.org/TR/REC-html40";><head><meta name=Generato r content="Microsoft Word 15 (filtered medium)"><style></style></head><body lan g=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div c lass=WordSection1><p class=MsoNormal><o:p>&nbsp\;</o:p></p><div><p class=M soNormal><span style='color:#5F5F5F'>_____________________________________ ___________________________________________</span> <o:p></o:p></p></div><d iv><div style='margin-top:.25in\;margin-bottom:15.0pt'><p class=MsoNormal> <span style='font-size:18.0pt\;font-family:"Segoe UI"\,sans-serif\;color:# 252424'>Microsoft Teams meeting</span><span style='font-family:"Segoe UI"\ ,sans-serif\;color:#252424'> <o:p></o:p></span></p></div><div style='margi n-bottom:15.0pt'><div><p class=MsoNormal><b><span style='font-size:10.5pt\ ;font-family:"Segoe UI"\,sans-serif\;color:#252424'>Join on your computer or mobile app</span></b><b><span style='font-family:"Segoe UI"\,sans-serif \;color:#252424'> <o:p></o:p></span></b></p></div><p class=MsoNormal><span style='font-family:"Segoe UI"\,sans-serif\;color:#252424'><a href="https: //teams.microsoft.com/l/meetup-join/19%3ameeting_MTM4MmE5NTEtNzI5ZS00NDUzL WEwODMtZDA5YzQ3Zjk2ZDcw%40thread.v2/0?context=%7b%22Tid%22%3a%223ccde76c-9 46d-4a12-bb7a-fc9d0842354a%22%2c%22Oid%22%3a%22fdd063bd-5a3a-4383-b6a3-a4d 0bf64f24f%22%7d" target="_blank"><span style='font-size:10.5pt\;font-famil y:"Segoe UI Semibold"\,sans-serif\;color:#6264A7'>Click here to join the m eeting</span></a> <o:p></o:p></span></p></div><div style='margin-top:15.0p t\;margin-bottom:15.0pt'><div style='margin-bottom:3.0pt'><p class=MsoNorm al><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;colo r:#252424'>Meeting ID: </span><span style='font-size:12.0pt\;font-family:" Segoe UI"\,sans-serif\;color:#252424'>235 705 165 919</span><span style='f ont-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;color:#252424'> </spa n><span style='font-family:"Segoe UI"\,sans-serif\;color:#252424'><br></sp an><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;colo r:#252424'>Passcode: </span><span style='font-size:12.0pt\;font-family:"Se goe UI"\,sans-serif\;color:#252424'>FgMRgm </span><span style='font-family :"Segoe UI"\,sans-serif\;color:#252424'><o:p></o:p></span></p><div><p clas s=MsoNormal><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-se rif\;color:#252424'><a href="https://www.microsoft.com/en-us/microsoft-tea ms/download-app" target="_blank"><span style='color:#6264A7'>Download Team s</span></a> | <a href="https://www.microsoft.com/microsoft-teams/join-a-m eeting" target="_blank"><span style='color:#6264A7'>Join on the web</span> </a><o:p></o:p></span></p></div></div></div><div style='margin-bottom:3.0p t'><div style='margin-bottom:3.0pt'><p class=MsoNormal><b><span style='fon t-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;color:#252424'>Or call in (audio only)</span></b><span style='font-family:"Segoe UI"\,sans-serif\ ;color:#252424'> <o:p></o:p></span></p></div><div style='margin-bottom:3.0 pt'><p class=MsoNormal><span style='font-family:"Segoe UI"\,sans-serif\;co lor:#252424'><a href="tel:+12025166093\,\,934157496# "><span style='font-s ize:10.5pt\;color:#6264A7'>+1 202-516-6093\,\,934157496#</span></a> </span ><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;color: #252424'>&nbsp\; United States\, Washington DC </span><span style='font-fa mily:"Segoe UI"\,sans-serif\;color:#252424'><o:p></o:p></span></p></div></ div><p class=MsoNormal><span style='font-size:10.5pt\;font-family:"Segoe U I"\,sans-serif\;color:#252424'>Phone Conference ID: </span><span style='fo nt-size:12.0pt\;font-family:"Segoe UI"\,sans-serif\;color:#252424'>934 157 496# </span><span style='font-family:"Segoe UI"\,sans-serif\;color:#25242 4'><o:p></o:p></span></p><div style='margin-bottom:15.0pt'><p class=MsoNor mal><span style='font-family:"Segoe UI"\,sans-serif\;color:#252424'><a hre f="https://dialin.teams.microsoft.com/0f144dc4-5393-4cb8-be1f-727dab028df1 ?id=934157496" target="_blank"><span style='font-size:10.5pt\;color:#6264A 7'>Find a local number</span></a> | <a href="https://dialin.teams.microsof t.com/usp/pstnconferencing" target="_blank"><span style='font-size:10.5pt\ ;color:#6264A7'>Reset PIN</span></a> <o:p></o:p></span></p></div><div styl e='margin-bottom:3.0pt'><div><p class=MsoNormal><span style='font-size:10. 5pt\;font-family:"Segoe UI"\,sans-serif\;color:#252424'><img border=0 widt h=100 height=100 style='width:1.0416in\;height:1.0416in' id="_x0000_i1025" src="https://www.dhs.gov/sites/default/files/2022-01/22_0131_OPA_DHS-Seal .png"></span><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-s erif\;color:#252424'><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:10.5pt\;font-family:"Segoe UI"\,sans-serif\;color:#252424 '>* * * * * U.S. Department of Homeland Security * * * * * <o:p></o:p></sp an></p></div><div style='margin-top:15.0pt\;margin-bottom:.25in'><p class= MsoNormal><span style='font-family:"Segoe UI"\,sans-serif\;color:#252424'> <a href="https://aka.ms/JoinTeamsMeeting"; target="_blank"><span style='fon t-size:10.5pt\;color:#6264A7'>Learn More</span></a> | <a href="https://tea ms.microsoft.com/meetingOptions/?organizerId=fdd063bd-5a3a-4383-b6a3-a4d0b f64f24f&amp\;tenantId=3ccde76c-946d-4a12-bb7a-fc9d0842354a&amp\;threadId=1 9_meeting_MTM4MmE5NTEtNzI5ZS00NDUzLWEwODMtZDA5YzQ3Zjk2ZDcw@thread.v2&amp\; messageId=0&amp\;language=en-US" target="_blank"><span style='font-size:10 .5pt\;color:#6264A7'>Meeting options</span></a> <o:p></o:p></span></p></di v></div><div><p class=MsoNormal><span style='color:#5F5F5F'>______________ __________________________________________________________________</span> <o:p></o:p></p></div><p class=MsoNormal><o:p>&nbsp\;</o:p></p></div></body ></html> X-MICROSOFT-CDO-BUSYSTATUS:BUSY X-MICROSOFT-CDO-IMPORTANCE:1 X-MICROSOFT-DISALLOW-COUNTER:FALSE X-MS-OLK-APPTSEQTIME:20220816T191358Z X-MS-OLK-AUTOFILLLOCATION:FALSE X-MS-OLK-CONFTYPE:0 BEGIN:VALARM TRIGGER:-PT15M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR

Attachment: CISA SBOM Listening Sessions Sharing summary.pdf
Description: CISA SBOM Listening Sessions Sharing summary.pdf