I love and respect NIST and I just want to come right out with that so you know where I am coming from. Now add on top of that the fact that they have just issued a draft document that discusses items at the intersection of three of my passions, Cyber Security, Technology and Intelligence, and you can see why I am so excited. So, with my bias in mind, I report the following:
NIST has just produced a draft special publication that I believe is the best thing I have ever read from their organization. The document is SP 800-150, the Guide to Cyber Threat Information Sharing.
This is a draft released for public comment. Expect changes in the final version. But this is ready for your review right now. If you are a CIO, CISO, CTO or other enterprise IT professional you will learn lessons and gain insights into approaches that can help you enhance your ability to create, acquire, process, share and act on cyber threat intelligence. It is well worth reviewing now, even while it is in draft.
As a draft, comments are being solicited, and I already have a few minor ones I’ll be suggesting for NIST consideration. For example, I do not like the way they bestow credit upon one particular integrator who rushed out and trademarked a term that had been in use in the community for decades. I’m going to work to ensure that is put in a community-focused light. I am going to suggest a tiny bit more information on some key technical standards for information sharing. Although I love the reference to standards on the last page, I’m thinking a paragraph or two on OVAL, SCAP, STIX, TAXII and VERIS could be helpful to enterprise IT professionals.
But those are minor suggestions. Overall I found this to be a fantastic document that I believe can make a positive contribution to enterprise threat information sharing right now.
To read more see: NIST SP 800-150
More reading:
NIST report on IoT security raises awareness on risks of connected devices
CTOvision Guide To The Cybersecurity Technology Marketplace
