2023-00529. Open Meeting of the Information Security and Privacy Advisory Board

AGENCY:

National Institute of Standards and Technology.

ACTION:

Notice.

SUMMARY:

The Information Security and Privacy Advisory Board (ISPAB) will meet Wednesday, March 1, 2023, from 10 a.m. until 4 p.m., Eastern Time, and Thursday, March 2, 2023, from 10 a.m. until 4 p.m., Eastern Time. All sessions will be open to the public.

DATES:

The meeting will be held on Wednesday, March 1, 2023, from 10 a.m. until 4 p.m., Eastern Time, and Thursday, March 2, 2023, from 10 a.m. until 4 p.m., Eastern Time.

ADDRESSES:

The meeting will be held at Grand Hyatt Washington, Quarter Penn A, 1000 H Street NW, Washington, DC 20001. Please note admittance instructions under the SUPPLEMENTARY INFORMATION section of this notice.

FOR FURTHER INFORMATION CONTACT:

Jeff Brewer, Information Technology Laboratory, NIST, 100 Bureau Drive, Stop 8930, Gaithersburg, MD 20899-8930, Telephone: [phone], Email address: [e-mail].

SUPPLEMENTARY INFORMATION:

Pursuant to the Federal Advisory Committee Act, as amended, 5 U.S.C. App., notice is hereby given that the ISPAB will meet Wednesday, March 1, 2023, from 10 a.m. until 4 p.m., Eastern Time, and Thursday, March 2, 2023, from 10 a.m. until 4 p.m., Eastern Time. All sessions will be open to the public. The ISPAB is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security, and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including thorough review of proposed standards and guidelines developed by NIST. Details regarding the ISPAB's activities are available at https://csrc.nist.gov/​projects/​ispab.

The agenda is expected to include the following items:

—Board Introductions and Member Activities,

—Update from NIST's Information Technology Laboratory (ITL) Director,

—A Discussion of Risk Framework Uses by U.S. Federal Agencies,

—A Discussion of OMB Memo M-22-18 Enhancing the Security of the Software Supply Chain Through Secure Software Development Practices,

—A Presentation of the DHS CISA Cross Sector Cybersecurity Performance Goals,

—A Presentation of Inspector General Cybersecurity Metrics for Federal Agencies,

—A Presentation and Discussion on Federal Cybersecurity Strategic Plans,

—Public comments,

—Board Discussions and Recommendations.

Note that agenda items may change without notice. The final agenda will be posted on the ISPAB event page: https://csrc.nist.rip/​events/​2023/​ispab-march-2023-meeting. Seating will be available for the public and media. Pre-registration is not required to attend this meeting.

Public Participation: Written questions or comments from the public are invited and may be submitted electronically by email to Jeff Brewer at the contact information indicated in the FOR FURTHER INFORMATION CONTACT section of this notice by 5 p.m. on Tuesday, February 28, 2023.

The ISPAB agenda will include a period, not to exceed thirty minutes, for submitted questions or comments from the public between 3:00 p.m. and 3:30 p.m. on Wednesday, March 1, 2023. Submitted questions or comments from the public will be selected on a first-come, first-served basis and limited to five minutes per person.

Members of the public who wish to expand upon their submitted statements, those who had wished to submit a question or comment but could not be accommodated on the agenda, and those who were unable to attend the meeting in person are invited to submit written statements. In addition, written statements are invited and may be submitted to the ISPAB at any time. All written statements should be directed to the ISPAB Secretariat, Information Technology Laboratory by email to: [e-mail].

Admittance Instructions: No registration is required for this in-person only event.

Alicia Chambers,

NIST Executive Secretariat.