Re: [secdir] EU Cyber Security Strategy.

"Moriarty, Kathleen" <kathleen.moriarty@emc.com> Wed, 30 January 2013 22:03 UTC

From: "Moriarty, Kathleen" <kathleen.moriarty@emc.com>
To: Olaf Kolkman <olaf@NLnetLabs.nl>, "secdir@ietf.org" <secdir@ietf.org>
Date: Wed, 30 Jan 2013 17:03:10 -0500
Thread-Topic: [secdir] EU Cyber Security Strategy.
Thread-Index: Ac39Vcq0A1u5Kb98QIG93zkkljDXsQB3sdog
Message-ID: <F5063677821E3B4F81ACFB7905573F24CE9E25B2@MX15A.corp.emc.com>
References: <C9F001FD-1F18-4789-89E7-07A31BA9A922@NLnetLabs.nl>
In-Reply-To: <C9F001FD-1F18-4789-89E7-07A31BA9A922@NLnetLabs.nl>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_F5063677821E3B4F81ACFB7905573F24CE9E25B2MX15Acorpemccom_"
MIME-Version: 1.0
Cc: IAB IAB <iab@iab.org>, Hannes Tschofenig <Hannes.Tschofenig@nsn.com>
Subject: Re: [secdir] EU Cyber Security Strategy.
Precedence: list

Thank you for sending out the information.  The IETF working group called Managed incident Lightweight Exchange (MILE) has standards that can be used and referenced in this space.  We are just about to begin work on revising RFC5070 to update the data model to meet current use cases.  It would be great to have their input to ensure their use cases are met as a number of vendors are interested in using international standards to enable information sharing.

If they need to reference ISO or ITU-T standards, there are actually ITU-T Recommendations that point to several of the key RFCs:
x.1540  is reference to RFC5070
x.1580 is a reference to RFC6545
x.1581 is a reference to  RFC6546

I am involved in several efforts using the standards and am happy to help with more information or connection points that are possible now or in the future.

Best regards,
Kathleen


From: secdir-bounces@ietf.org [mailto:secdir-bounces@ietf.org] On Behalf Of Olaf Kolkman
Sent: Monday, January 28, 2013 7:42 AM
To: secdir@ietf.org
Cc: IAB IAB; Hannes Tschofenig
Subject: [secdir] EU Cyber Security Strategy.


Folk,

This mail is FYI, it may be of business/personal interest to some of you.
I have a specific question.

Context: MSP for ICT St.

You may or may not be aware that the EU has a Multi Stakeholder Platform for ICT standardization. One of the stakeholders at the table is the IETF/IAB and your truly is, with Hannes Tschofenig as backup, the representative for the IETF/IAB.

The platform is chartered to give the Commission advise on all matters standard and to identify standards, developed by fora and consortia, that can be used in public procurement (formally RFCs can not be reference in EU procurement: when these folk talk about standards they think ISO, ITU, ETSI etc etc.)


Specific: EU Cyber Sec Strat.

What is attached is part on the advise on all matters standard aspect. The document gives a short executive level overview of what the EU intends with its cyber security strategy. The document is FYI mainly.

However I have one particular bit of information that I need. See the section on "Where do standards come in". I do not think there is any relevant IETF work in this area (info exchange and such) and would like to get guidance if that is a misunderstanding.


The platform is having its 3rd meeting 7 Feb.

[secdir] EU Cyber Security Strategy. Olaf Kolkman
Re: [secdir] EU Cyber Security Strategy. Hannes Tschofenig
Re: [secdir] EU Cyber Security Strategy. Olaf Kolkman
Re: [secdir] EU Cyber Security Strategy. Stephen Farrell
Re: [secdir] EU Cyber Security Strategy. Olaf Kolkman
Re: [secdir] EU Cyber Security Strategy. Moriarty, Kathleen
Re: [secdir] EU Cyber Security Strategy. Olaf Kolkman
Re: [secdir] EU Cyber Security Strategy. Stephen Farrell
Re: [secdir] EU Cyber Security Strategy. Tobias Gondrom