Re: [scap_interest] Just throwing this out there: Compliance Frameworks

Adam Montville <amontville@tripwire.com> Wed, 15 February 2012 17:05 UTC

Return-Path: <amontville@tripwire.com>
X-Original-To: scap_interest@ietfa.amsl.com
Delivered-To: scap_interest@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E088E21E8040 for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 09:05:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.366
X-Spam-Level:
X-Spam-Status: No, score=-4.366 tagged_above=-999 required=5 tests=[AWL=-0.767, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id taHB4NO13TmI for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 09:05:47 -0800 (PST)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe003.messaging.microsoft.com [216.32.181.183]) by ietfa.amsl.com (Postfix) with ESMTP id 419F921E809A for <scap_interest@ietf.org>; Wed, 15 Feb 2012 09:05:47 -0800 (PST)
Received: from mail161-ch1-R.bigfish.com (10.43.68.227) by CH1EHSOBE013.bigfish.com (10.43.70.63) with Microsoft SMTP Server id 14.1.225.23; Wed, 15 Feb 2012 17:05:47 +0000
Received: from mail161-ch1 (localhost [127.0.0.1]) by mail161-ch1-R.bigfish.com (Postfix) with ESMTP id B127F260418; Wed, 15 Feb 2012 17:05:46 +0000 (UTC)
X-SpamScore: -20
X-BigFish: VPS-20(zzzz1202hzz1033IL8275bh8275dhz2dh2a8h668h839h944h)
X-Forefront-Antispam-Report: CIP:174.47.84.216; KIP:(null); UIP:(null); IPV:NLI; H:PDXHB01.tripwire.com; RD:174-47-84-216.static.twtelecom.net; EFVD:NLI
Received: from mail161-ch1 (localhost.localdomain [127.0.0.1]) by mail161-ch1 (MessageSwitch) id 1329325544342005_27249; Wed, 15 Feb 2012 17:05:44 +0000 (UTC)
Received: from CH1EHSMHS005.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.245]) by mail161-ch1.bigfish.com (Postfix) with ESMTP id 432C61C0045; Wed, 15 Feb 2012 17:05:44 +0000 (UTC)
Received: from PDXHB01.tripwire.com (174.47.84.216) by CH1EHSMHS005.bigfish.com (10.43.70.5) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 15 Feb 2012 17:05:42 +0000
Received: from PDXHB01.tripwire.com (172.30.0.53) by PDXED01.tripwire.com (192.168.192.5) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 15 Feb 2012 09:14:26 -0800
Received: from PDXMB02.tripwire.com ([fe80::f997:7b65:8e64:438e]) by PDXHB01.tripwire.com ([fe80::d495:98d2:7df4:2154%11]) with mapi id 14.01.0355.002; Wed, 15 Feb 2012 09:05:40 -0800
From: Adam Montville <amontville@tripwire.com>
To: Dorian Cougias <dcougias@unifiedcompliance.com>
Thread-Topic: [scap_interest] Just throwing this out there: Compliance Frameworks
Thread-Index: AQHM7AJHFwTZs7qhn06H9/Cuq2bu9pY+taKA//96c4A=
Date: Wed, 15 Feb 2012 17:05:40 +0000
Message-ID: <CB6125DC.9378%amontville@tripwire.com>
In-Reply-To: <13581f83b6b.3618184224261303866.418390722739732418@unifiedcompliance.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.14.0.111121
x-originating-ip: [172.30.0.234]
x-exclaimer-md-config: 79afcaa7-fdf4-4fa6-abe0-afeaa4640a4f
Content-Type: text/plain; charset="us-ascii"
Content-ID: <B949758D1FD8B643AF5214C94712CDF4@tripwire.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: tripwire.com
Cc: "cisaacs@unifiedcompliance.com" <cisaacs@unifiedcompliance.com>, "scap_interest@ietf.org" <scap_interest@ietf.org>, "CCI@disa.mil" <CCI@disa.mil>
Subject: Re: [scap_interest] Just throwing this out there: Compliance Frameworks
X-BeenThere: scap_interest@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Discussion List for IETFers interested in the Security Content Automation Protocol \(SCAP\)." <scap_interest.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scap_interest>
List-Post: <mailto:scap_interest@ietf.org>
List-Help: <mailto:scap_interest-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Feb 2012 17:05:48 -0000

Excellent!  Good to have you here.

From: Dorian Cougias <dcougias@unifiedcompliance.com<mailto:dcougias@unifiedcompliance.com>>
Date: Wed, 15 Feb 2012 09:03:43 -0800
To: Adam Montville <amontville@tripwire.com<mailto:amontville@tripwire.com>>
Cc: "CCI@disa.mil<mailto:CCI@disa.mil>" <CCI@disa.mil<mailto:CCI@disa.mil>>, "scap_interest@ietf.org<mailto:scap_interest@ietf.org>" <scap_interest@ietf.org<mailto:scap_interest@ietf.org>>, kent_landfield <kent_landfield@mcafee.com<mailto:kent_landfield@mcafee.com>>, "cisaacs@unifiedcompliance.com<mailto:cisaacs@unifiedcompliance.com>" <cisaacs@unifiedcompliance.com<mailto:cisaacs@unifiedcompliance.com>>
Subject: Re: [scap_interest] Just throwing this out there: Compliance Frameworks

Yes. I've signed up on the list and will contribute as much as you'd like.

This might dovetail in very well with our Online Mapping Tool effort we are beginning to release this year.

Dorian J. Cougias
Compliance Scientist
Unified Compliance Framework


---- On Wed, 15 Feb 2012 08:53:02 -0800 Adam Montville<amontville@tripwire.com<mailto:amontville@tripwire.com>> wrote ----

Can we then expect that UCF will be contributing to the effort? I think our thoughts with respect to representing frameworks and controls would be well-informed by UCF's experience.

Adam

From: Dorian Cougias <dcougias@unifiedcompliance.com<mailto:dcougias@unifiedcompliance.com><mailto:dcougias@unifiedcompliance.com>>
Date: Wed, 15 Feb 2012 08:08:28 -0800
To: Adam Montville <amontville@tripwire.com<mailto:amontville@tripwire.com><mailto:amontville@tripwire.com>>
Cc: <CCI@disa.mil<mailto:CCI@disa.mil><mailto:CCI@disa.mil>>, <scap_interest@ietf.org<mailto:scap_interest@ietf.org><mailto:scap_interest@ietf.org>>, kent_landfield <kent_landfield@mcafee.com<mailto:kent_landfield@mcafee.com><mailto:kent_landfield@mcafee.com>>, <cisaacs@unifiedcompliance.com<mailto:cisaacs@unifiedcompliance.com><mailto:cisaacs@unifiedcompliance.com>>
Subject: Re: FW: [scap_interest] Just throwing this out there: Compliance Frameworks