Welcome to the Federal Cybersecurity & Privacy Professionals Forum Quarterly Meeting

December 2, 2021 | 9:00 AM – 12:15 PMVirtual Meeting

The meeting will begin at 9:00 AM Eastern.

If you have technical issues with WebEx Events, contact: sec-forum@nist.gov

Federal Cybersecurity & Privacy Professionals Forum | 12.02.21

Virtual Meeting Etiquette & Reminders

Due to the number of attendees, WebEx Events automatically mutes all participant microphones and cameras.

Please enter questions and comments for presenters in the WebEx Q&A. Do not send questions via direct message to the host/panelists or in the Chat.

Q&A and Chat are NOT moderated. Please be kind and courteous to others

For technical issues with WebEx Events, contact: sec-forum@nist.gov

2

Forum Quarterly Meeting FAQ

The Forum quarterly meetings are not recorded unless requested by the presenter. No sessions from the 12/2/21 Forum Quarterly Meeting will be recorded.

Will this event be recorded?

If granted permission by the speakers, slides will be posted within 10 business days on the event site.

When will slides be posted?

Yes, however, you must self-report with your certifying organization. NIST provides a form to self-submit, available for download on the event site.

Can I get CEUs for attending?

https://csrc.nist.gov/Events/2021/federal-cybersecurity-privacy-professionals-fo-1

Where is the event site?

3Federal Cybersecurity & Privacy Professionals Forum | 12.02.21

Forum Quarterly Meeting Agenda

4

December 2, 2021 | 9:00 AM - 12:15 PM ET | via WebEx Events

9:00 AM ETWelcome and AnnouncementsKaitlin Boeckl and Victoria Yan PillitteriForum Co-Chairs, Applied Cybersecurity Division (ACD) & Computer Security Division (CSD), NIST

9:10 AM ETKeynote: Update from the Office of the Federal Chief Information OfficerMaria RoatDeputy Federal Chief Information Officer (CIO), Office of Management & Budget (OMB)

9:45 AM ETUpdate from GAO on the Cybersecurity & Information Security Audit ManualJennifer R. FranksDirector of Information Technology & Cybersecurity, U.S. Government Accountability Office (GAO)

10:30 AM ET

OMB Circular A-130 Implementation and Updates to SP 800-53 and FedRAMPCarol Bales, Senior Policy Analyst, Office of Federal CIO, OMBBrian Conrad, Acting FedRAMP Director, General Services Administration (GSA) Victoria Yan Pillitteri, Acting Manager, Security Engineering & Risk Management Group, NIST

11:15 AM ETFederal Zero Trust StrategyEric MillSenior Advisor to the Federal CIO, OMB

12:00 PM ET Closing RemarksFederal Cybersecurity & Privacy Professionals Forum | 12.02.21

Forum Announcements andUpdates from NIST Computer Security & Applied Cybersecurity Divisions

Update on NIST Publications

6

Published as final:• NIST SP 800-213 and SP 800-213A, IoT

Device Cybersecurity Guidance for Federal Government and Requirements Catalog (Nov 29, 2021)

• NISTIR 8286A, Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management (Nov 12, 2021)

Published as draft for comment:• NIST SP 800-161, Rev 1, Cybersecurity

Supply Chain Risk Management Practices for Systems and Organizations (Oct 28 – Dec 10, 2021)

• White Paper: Baseline Criteria for Consumer Software Labeling (Nov 1 – Dec 16, 2021)

https://csrc.nist.gov/publications

Federal Cybersecurity & Privacy Professionals Forum | 12.02.21

STAY IN TOUCHCONTACT US

@NISTcyber

https://csrc.nist.gov/Projects/forum sec-forum@nist.gov

7

Thank You for Attending the Federal Cybersecurity & Privacy Professionals Forum Quarterly Meeting!

Continue the discussion at FCSM@list.nist.gov

Slides will be posted within 2 weeksCEU form available

Save the Date for the Next Forum Virtual Meeting: February 15, 2022