I mentioned the CISA SBOMarama at the PGB meeting. For those interested, the websites are now up. See: https://www.cisa.gov/sbom https://www.cisa.gov/cisa-sbom-rama For those who already expressed

Open Cybersecurity Alliance Project Governing Board Upcoming Events Architecture Workgroup Meeting When: Thursday, December 9, 2021, 4:00pm to 5:00pm (GMT-05:00) America/New

WRT: “Duncan has agenda items he wants to raise around SBOM and potential inbound projects” For those of you who are not aware, CISA has taken the lead from NTIA on implementing SBOM (software

WRT: “Duncan has proposal that the TSC should simply be constituted of a federation of the key project maintainers and make them responsible for technical governance.” My proposal is slightly

Hi all; today in the final call of 2021 - I want to very much focus on governance & strategy of the organization. - We have failed to recruit non-maintainer volunteers for the TSC - We continue to

What is logic on the ordering of the projects? It seems neither chronological nor alphabetical. I’d vote alphabetical. iPhone, iTypo, iApologize

Here is a proposed outline for the new home page. Left side for technical material and information (for technical folks); right side for activities/calendar and news/blog info. Under these is info

Description

Description

Open Cybersecurity Alliance Project Governing Board Upcoming Events Zero Trust Workgroup Call When: Monday, November 29, 2021, 4:00pm to 5:00pm (GMT-05:00) America/New

Several things come to mind reading this. One is to distinguish between securing our systems and providing tools to secure client systems. Eg. Securing the instantiation of stixshifter itself vs

Dennis has pulled together some background for your pre-reading. Please review and come prepared to discuss ideas on how the work group can progress and provide suggestions on what the work group

Description Moving back 30 minutesMoving back 30 minutes

Team leaders, From time to time, we get reports of outsiders crashing team calls. There has been a recent spate of such disruptions again. The effect of these interruptions can be anywhere from

I agree Governance should be a focus. Our website claims: Governance Developers, corporate supporters, and technology consumers all have a voice in decision-making. The PGB has a responsibility to

Hi Duncan; I have not forgotten about this email. As you know - we have a lot of open switches around project governance in the OCA. Despite our best efforts we are having a lot of trouble bringing

Open Cybersecurity Alliance Project Governing Board Upcoming Events Zero Trust Workgroup Call When: Monday, November 29, 2021, 4:00pm to 5:00pm (GMT-05:00) America/New

Dennis Moreau will describe his progress on extending the use case to include EDR, and possibly NDR. His first step has been to identify candidate actions, enabled by APIs for representative EDR and

PACE is now a new OCA project. It would help me to understand the governance models of the other existing OCA projects and if there are rules or guidance from the OCA PGB on the governance models of

I look to the STIX-Shifter readme here, https://github.com/opencybersecurityalliance/stix-shifter#readme as a good example for our individual projects with a well organized overview,