Re: [scap_interest] Just throwing this out there: Compliance Frameworks

Adam Montville <amontville@tripwire.com> Wed, 15 February 2012 16:53 UTC

Return-Path: <amontville@tripwire.com>
X-Original-To: scap_interest@ietfa.amsl.com
Delivered-To: scap_interest@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 406A121F86E4 for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 08:53:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.799
X-Spam-Level:
X-Spam-Status: No, score=-5.799 tagged_above=-999 required=5 tests=[AWL=0.800, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hOm6OMMjSz-W for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 08:53:09 -0800 (PST)
Received: from TX2EHSOBE004.bigfish.com (tx2ehsobe003.messaging.microsoft.com [65.55.88.13]) by ietfa.amsl.com (Postfix) with ESMTP id AA82F21F867E for <scap_interest@ietf.org>; Wed, 15 Feb 2012 08:53:09 -0800 (PST)
Received: from mail115-tx2-R.bigfish.com (10.9.14.249) by TX2EHSOBE004.bigfish.com (10.9.40.24) with Microsoft SMTP Server id 14.1.225.23; Wed, 15 Feb 2012 16:53:09 +0000
Received: from mail115-tx2 (localhost [127.0.0.1]) by mail115-tx2-R.bigfish.com (Postfix) with ESMTP id D03A53403B7; Wed, 15 Feb 2012 16:53:08 +0000 (UTC)
X-SpamScore: -20
X-BigFish: VPS-20(zzzz1202hzz1033IL8275bh8275dhz2dh2a8h668h839h944h)
X-Forefront-Antispam-Report: CIP:174.47.84.216; KIP:(null); UIP:(null); IPV:NLI; H:PDXHB01.tripwire.com; RD:174-47-84-216.static.twtelecom.net; EFVD:NLI
Received: from mail115-tx2 (localhost.localdomain [127.0.0.1]) by mail115-tx2 (MessageSwitch) id 1329324785999287_8847; Wed, 15 Feb 2012 16:53:05 +0000 (UTC)
Received: from TX2EHSMHS025.bigfish.com (unknown [10.9.14.250]) by mail115-tx2.bigfish.com (Postfix) with ESMTP id C089D6004F; Wed, 15 Feb 2012 16:53:05 +0000 (UTC)
Received: from PDXHB01.tripwire.com (174.47.84.216) by TX2EHSMHS025.bigfish.com (10.9.99.125) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 15 Feb 2012 16:53:04 +0000
Received: from PDXHB01.tripwire.com (172.30.0.53) by PDXED01.tripwire.com (192.168.192.5) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 15 Feb 2012 09:01:49 -0800
Received: from PDXMB02.tripwire.com ([fe80::f997:7b65:8e64:438e]) by PDXHB01.tripwire.com ([fe80::d495:98d2:7df4:2154%11]) with mapi id 14.01.0355.002; Wed, 15 Feb 2012 08:53:03 -0800
From: Adam Montville <amontville@tripwire.com>
To: Dorian Cougias <dcougias@unifiedcompliance.com>
Thread-Topic: [scap_interest] Just throwing this out there: Compliance Frameworks
Thread-Index: AQHM7AJHFwTZs7qhn06H9/Cuq2bu9g==
Date: Wed, 15 Feb 2012 16:53:02 +0000
Message-ID: <CB61228B.936C%amontville@tripwire.com>
In-Reply-To: <13581c5a773.-8427891971547525804.-1571334784707300096@unifiedcompliance.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.14.0.111121
x-originating-ip: [172.30.0.234]
x-exclaimer-md-config: 79afcaa7-fdf4-4fa6-abe0-afeaa4640a4f
Content-Type: text/plain; charset="us-ascii"
Content-ID: <253FD9E85E37F94B87CDC2A72FAF933C@tripwire.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: tripwire.com
Cc: "cisaacs@unifiedcompliance.com" <cisaacs@unifiedcompliance.com>, "scap_interest@ietf.org" <scap_interest@ietf.org>, "CCI@disa.mil" <CCI@disa.mil>
Subject: Re: [scap_interest] Just throwing this out there: Compliance Frameworks
X-BeenThere: scap_interest@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Discussion List for IETFers interested in the Security Content Automation Protocol \(SCAP\)." <scap_interest.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scap_interest>
List-Post: <mailto:scap_interest@ietf.org>
List-Help: <mailto:scap_interest-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Feb 2012 16:53:10 -0000

Can we then expect that UCF will be contributing to the effort?  I think our thoughts with respect to representing frameworks and controls would be well-informed by UCF's experience.

Adam

From: Dorian Cougias <dcougias@unifiedcompliance.com<mailto:dcougias@unifiedcompliance.com>>
Date: Wed, 15 Feb 2012 08:08:28 -0800
To: Adam Montville <amontville@tripwire.com<mailto:amontville@tripwire.com>>
Cc: <CCI@disa.mil<mailto:CCI@disa.mil>>, <scap_interest@ietf.org<mailto:scap_interest@ietf.org>>, kent_landfield <kent_landfield@mcafee.com<mailto:kent_landfield@mcafee.com>>, <cisaacs@unifiedcompliance.com<mailto:cisaacs@unifiedcompliance.com>>
Subject: Re: FW: [scap_interest] Just throwing this out there: Compliance Frameworks