CVE Board Agenda for Wednesday, 24July 2019

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

CVE Board Agenda for Wednesday, 24July 2019

Bazar, Jo E.

Agenda

2:00 – 2:15: Introductions, action items from the last meeting 

2:15 – 2:30: Working Groups

  • CNA Coordination Working Group (CNACWG) - Tod Beardsley
  • Quality Working Group (QWG): Dave Waltermire/Chris Coffin
  • Automation Working Group (AWG)– Lew Loren
  • Strategic Planning Working Group (SPWG)– Kent Landfield/Chris Coffin

 

2:30 – 2:45: Root CNA Update

  • MITRE – Jonathan Evans
  • JPCERT – Jonathan Evans/Chris Coffin

 

2:45 – 3:55: Open Discussion  

3:55 – 4:00: Action items, wrap-up

 

 

Review of Action Items from Board Meeting held on 10 July 2019


#


Action Item


Responsible Party


Status


Comments

1.23.1

Assemble additional operational guidance for program participation by CNAs (e.g., webinars, instructional videos).

MITRE (Evans/Sain)

In Process

MITRE assembled a list of guidance priorities and other areas of the program; the top five priorities are listed below:

  1. How to submit entries to MITRE using the web form 
  2. CVE ID assignment rule (Counting) 
  3. Becoming a CNA
  4. CVE Program (includes Root structure)
  5. How to request the MITRE CNA populate a CVE entry

 

4/3 Update: Jonathan has started assigning some of the individual modules to members of the CNA coordination team and content team. In addition, the CCWG is also reviewing and updating the existing online guidance.

6/12 Update: In process. Some of the draft scripts completed for the online individual modules and the existing online guidance are also being reviewed and updated.

4.17.3

Break out future discussion items in the following categories: Ongoing, Future, and OBE. Report back to CVE Board and add for future discussions items.

MITRE (CVE Team)

In Process

6/26 Update: Discussed in the 6/24 SPWG call and decided to ask the Board to walk through the items in the CVE Board meeting on July 10.

7/10 Update: Agenda item set for today to start discussion 

7/24: Future discussion items have been assigned to WG. Next steps send to recommended working groups.

4.17.5

Research solution for storing, archiving, and central repository for CVE Board and WG meeting minutes, as well as tracking action items.

MITRE (CVE Team)

In Process

6/12 Update: CNA SharePoint site is up (MITRE partners account is required), Handshake account is used for current meeting recordings and we are moving the archive of recordings to Amazon glacier for cold storage.   

6.12.2

Finalize “Trifold” or “Flyer” before CVE 20-year Milestone event in Las Vegas, on August 7th.

CVE Board (select)

/MITRE

In Process

6.12 Update: Draft flyer sent to Beverly M., Kent L., Tod B., Shannon S., Andrea T. and Taki U. for review and feedback with a due date of June 28, 2019.

7/24: OCWG established and Flyer will be transferred to OCWG for completion.

6.12.3

Develop Objectives/Goals for CVE Outreach and Communications WG, send to CVE Board for review and feedback. Next step is to send to CNA List for OCWG volunteers and participation. 

MITRE (Jo Bazar)

Completed

6.26 Update: Draft sent to CVE Private Board for review and feedback; due to Jo Bazar by July 9, 2019.

7/10: Next step is to send to CNA List for OCWG volunteers and participation, NLT that COB 7/11/2019. 

7/24: Request sent to OCWG to schedule kick off meeting for next week.

6.26.1

Send invite (Eventbrite) to CNA list, CVE Board members and other invitees for BlackHat 20-year event on August 7, 2019.

MITRE

In Process

7/10: Invites will be sent in 3 phases.

Round 1: Invites sent on 7/3 with RSVP by 7/12 to current Board, current and former MITRE CVE team members, former Board members.  COMPLETED

Round 2: Invites to be sent on 7/16 with RSVP by 7/23 to current CNAs (limit 2 per organization), current WG Members (if not part of Board or working groups).  COMPLETED

Round 3 (TENTATIVE): Invites to be sent on 7/26 with RSVP by 7/31 to candidate CNAs

6.26.2

Update Charter to reflect new interview process of board nominations and that CVE Board member can send nominations directly to the private board list. 

MITRE (Chris C.)

Not Started

Assigned 6/26/2019

6.26.3

Update Charter to reflect new Board nomination interview process. When a new Board member is nominated, a 30-minute interview is conducted during the next Board call.

MITRE (Chris C.)

Not Started

Assigned 6/26/2019

7.10.01

Send short names to CNA list for their review and input.

MITRE

(Jo Bazar)

Completed

7/24: Sent CNA company short name list to CNAs on 7/24, changes due back NLT August 5, 2019.

 

 

Reply | Threaded
Open this post in threaded view
|

[EXT] Re: CVE Board Agenda for Wednesday, 24July 2019

Kurt Seifried-2
I can't make the call but I'd suggest you discuss https://twitter.com/videolan/status/1153963312981389312 in the context of outreach/etc, I replied on twitter to clear up some misconceptions. 

On Wed, Jul 24, 2019 at 11:37 AM Bazar, Jo E. <[hidden email]> wrote:

Agenda

2:00 – 2:15: Introductions, action items from the last meeting 

2:15 – 2:30: Working Groups

  • CNA Coordination Working Group (CNACWG) - Tod Beardsley
  • Quality Working Group (QWG): Dave Waltermire/Chris Coffin
  • Automation Working Group (AWG)– Lew Loren
  • Strategic Planning Working Group (SPWG)– Kent Landfield/Chris Coffin

 

2:30 – 2:45: Root CNA Update

  • MITRE – Jonathan Evans
  • JPCERT – Jonathan Evans/Chris Coffin

 

2:45 – 3:55: Open Discussion  

3:55 – 4:00: Action items, wrap-up

 

 

Review of Action Items from Board Meeting held on 10 July 2019


#


Action Item


Responsible Party


Status


Comments

1.23.1

Assemble additional operational guidance for program participation by CNAs (e.g., webinars, instructional videos).

MITRE (Evans/Sain)

In Process

MITRE assembled a list of guidance priorities and other areas of the program; the top five priorities are listed below:

  1. How to submit entries to MITRE using the web form 
  2. CVE ID assignment rule (Counting) 
  3. Becoming a CNA
  4. CVE Program (includes Root structure)
  5. How to request the MITRE CNA populate a CVE entry

 

4/3 Update: Jonathan has started assigning some of the individual modules to members of the CNA coordination team and content team. In addition, the CCWG is also reviewing and updating the existing online guidance.

6/12 Update: In process. Some of the draft scripts completed for the online individual modules and the existing online guidance are also being reviewed and updated.

4.17.3

Break out future discussion items in the following categories: Ongoing, Future, and OBE. Report back to CVE Board and add for future discussions items.

MITRE (CVE Team)

In Process

6/26 Update: Discussed in the 6/24 SPWG call and decided to ask the Board to walk through the items in the CVE Board meeting on July 10.

7/10 Update: Agenda item set for today to start discussion 

7/24: Future discussion items have been assigned to WG. Next steps send to recommended working groups.

4.17.5

Research solution for storing, archiving, and central repository for CVE Board and WG meeting minutes, as well as tracking action items.

MITRE (CVE Team)

In Process

6/12 Update: CNA SharePoint site is up (MITRE partners account is required), Handshake account is used for current meeting recordings and we are moving the archive of recordings to Amazon glacier for cold storage.   

6.12.2

Finalize “Trifold” or “Flyer” before CVE 20-year Milestone event in Las Vegas, on August 7th.

CVE Board (select)

/MITRE

In Process

6.12 Update: Draft flyer sent to Beverly M., Kent L., Tod B., Shannon S., Andrea T. and Taki U. for review and feedback with a due date of June 28, 2019.

7/24: OCWG established and Flyer will be transferred to OCWG for completion.

6.12.3

Develop Objectives/Goals for CVE Outreach and Communications WG, send to CVE Board for review and feedback. Next step is to send to CNA List for OCWG volunteers and participation. 

MITRE (Jo Bazar)

Completed

6.26 Update: Draft sent to CVE Private Board for review and feedback; due to Jo Bazar by July 9, 2019.

7/10: Next step is to send to CNA List for OCWG volunteers and participation, NLT that COB 7/11/2019. 

7/24: Request sent to OCWG to schedule kick off meeting for next week.

6.26.1

Send invite (Eventbrite) to CNA list, CVE Board members and other invitees for BlackHat 20-year event on August 7, 2019.

MITRE

In Process

7/10: Invites will be sent in 3 phases.

Round 1: Invites sent on 7/3 with RSVP by 7/12 to current Board, current and former MITRE CVE team members, former Board members.  COMPLETED

Round 2: Invites to be sent on 7/16 with RSVP by 7/23 to current CNAs (limit 2 per organization), current WG Members (if not part of Board or working groups).  COMPLETED

Round 3 (TENTATIVE): Invites to be sent on 7/26 with RSVP by 7/31 to candidate CNAs

6.26.2

Update Charter to reflect new interview process of board nominations and that CVE Board member can send nominations directly to the private board list. 

MITRE (Chris C.)

Not Started

Assigned 6/26/2019

6.26.3

Update Charter to reflect new Board nomination interview process. When a new Board member is nominated, a 30-minute interview is conducted during the next Board call.

MITRE (Chris C.)

Not Started

Assigned 6/26/2019

7.10.01

Send short names to CNA list for their review and input.

MITRE

(Jo Bazar)

Completed

7/24: Sent CNA company short name list to CNAs on 7/24, changes due back NLT August 5, 2019.

 

 



--
Kurt Seifried
[hidden email]