CVE Board Agenda for Wednesday, 10 July 2019

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

CVE Board Agenda for Wednesday, 10 July 2019

Coffin, Chris

 

Agenda

2:00 – 2:15: Introductions, action items from the last meeting 

2:15 – 2:30: Working Groups

  • CNA Coordination Working Group (CNACWG) - Tod Beardsley
  • Quality Working Group (QWG): Dave Waltermire/Chris Coffin
  • Automation Working Group (AWG)– Lew Loren
  • Strategic Planning Working Group (SPWG)– Kent Landfield/Chris Coffin

 

2:30 – 2:45: Root CNA Update

  • MITRE – Jonathan Evans
  • JPCERT – Jonathan Evans/Chris Coffin

 

2:45 – 3:15: Walk Thru Future Discussion items

3:15 – 3:55: Open Discussion  

3:55 – 4:00: Action items, wrap-up

 

 

Review of Action Items from Board Meeting held on 26 June 2019


#


Action Item


Responsible Party


Status


Comments

1.23.1

Assemble additional operational guidance for program participation by CNAs (e.g., webinars, instructional videos).

MITRE (Evans/Sain)

In Process

MITRE assembled a list of guidance priorities and other areas of the program; the top five priorities are listed below:

  1. How to submit entries to MITRE using the web form 
  2. CVE ID assignment rule (Counting) 
  3. Becoming a CNA
  4. CVE Program (includes Root structure)
  5. How to request the MITRE CNA populate a CVE entry

 

4/3 Update: Jonathan has started assigning some of the individual modules to members of the CNA coordination team and content team. In addition, the CCWG is also reviewing and updating the existing online guidance.

6/12 Update: In process. Some of the draft scripts completed for the online individual modules and the existing online guidance are also being reviewed and updated.

2.6.9

Organize an event at Blackhat USA (August 2019) to celebrate 20 years of CVE.

MITRE (Joe S./Levendis)

Completed

6/12 Update: Contract is signed with Blackhat; waiting on confirmation of event date 8/7 or 8/8 before we can proceed with approvals. Once approved by BH, we can move forward with the event planning with Excalibur. The group agreed and the majority voted for August 7th.

6/13 Update: Approval form sent to BAH, pending approval.

6/26 Update: Approval received from BAH; space is available at the Excalibur. Excalibur is drafting up the contract. 

7/10: Contract signed on July 3, 2019.

4.17.3

Break out future discussion items in the following categories: Ongoing, Future, and OBE. Report back to CVE Board and add for future discussions items.

MITRE (CVE Team)

In Process

6/26 Update: Discussed in the 6/24 SPWG call and decided to ask the Board to walk through the items in the CVE Board meeting on July 10.

7/10 Update: Agenda item set for today to start discussion

4.17.5

Research solution for storing, archiving, and central repository for CVE Board and WG meeting minutes, as well as tracking action items.

MITRE (CVE Team)

In Process

6/12 Update: CNA SharePoint site is up (MITRE partners account is required), Handshake account is used for current meeting recordings and we are moving the archive of recordings to Amazon glacier for cold storage.   

4.17.7

Follow up with Kurt S. about the survey results; obtain for future use in QWG.

MITRE (Chris C.)

In Process

6/26 Update: Google docs report has been available since 5/14 and it has an image of the survey results. Sent an email to Kurt to get those results in a more accessible format.

6/27 Update: Kurt passed along the survey results in Excel format to the Cloud WG list

5.1.02

Send Cloud survey to CNA List so they can provide input.

Kurt S.

In Process

5/15 Update: Waiting on survey to close on item 4.17.1.

5.15.1

Create the invitation list for CVE celebration

ALL

Completed

6/26 Update:  The group started the draft list of invitees; list includes past/present CVE Board members and contributors. Send draft list to CVE Board for review/comment.

7/10: Draft list created, gathering email address and sending invites.

6.12.1

Send short names for CNA to review and provide input.

CNA Coordinators

In Process

6/26 Update: List sent to CVE Board for review June 26, 2019.

6.12.2

Finalize “Trifold” or “Flyer” before CVE 20-year Milestone event in Las Vegas, on August 7th.

CVE Board (select)

/MITRE

In Process

6.12 Update: Draft flyer sent to Beverly M., Kent L., Tod B., Shannon S., Andrea T. and Taki U. for review and feedback with a due date of June 28, 2019.

6.12.3

Develop Objectives/Goals for CVE Outreach and Communications WG, send to CVE Board for review and feedback. Next step is to send to CNA List for OCWG volunteers and participation. 

MITRE (Jo Bazar)

In Process

6.26 Update: Draft sent to CVE Private Board for review and feedback; due to Jo Bazar by July 9, 2019.

7/10: Next step is to send to CNA List for OCWG volunteers and participation. 

6.26.1

Send invite (e.g., Eventbrite) to CNA list, CVE Board members and other invitees for BlackHat 20-year event on August 7, 2019.

MITRE

In Process

7/10: Invites are being send in 3 phases.

Round 1: Invites sent on 7/3 with RSVP by 7/12. Sent to Current Board, MITRE current team, Ex-MITRE CVE Team and

Former Board Members.  

Round 2: Invites sent on 7/16 with RSVP by 7/23. Sent to Current CNAs (limit 2),

Current WG Members (if not part of Board or CNAs groups).  

Round 3 (TENTATIVE): Invites sent on 7/26 with RSVP by 7/31

Candidate CNAs  

6.26.2

Update Charter to reflect new interview process of board nominations and that CVE Board member can send nominations directly to the private board list. 

MITRE (Chris C.)

Not Started

Assigned 6/26/2019

6.26.3

Update Charter to reflect new Board nomination interview process. When a new Board member is nominated, a 30-minute interview is conducted during the next Board call.

MITRE (Chris C.)

Not Started

Assigned 6/26/2019