SAVE THE DATE
Date: March 8-10, 2016
Subject: Second Annual Adoption of Cybersecurity Technology Workshop
Location: Sandia National Laboratories, Albuquerque, NM
***Please look for an official invitation in early 2016. ****
Dear 2016 Adoption of Cybersecurity Technology Workshop Potential Attendee,
Please save the dates of March 8-10, 2016. The Adoption of Cybersecurity (ACT) Workshop, sponsored by the Special Cyber Operations Research and Engineering (SCORE) Subcommittee, will take place at Sandia National Laboratories Albuquerque, NM. Workshop proceedings, to include a summary of ACT 1 accomplishments (ACT 1 Spin 4) will begin at 8:00 AM Tuesday, March 8th and conclude around 3:00 PM on Thursday, March 10th, so please budget time for travel accordingly.
As a community, researchers and developers have produced many effective cybersecurity technology solutions that are not implemented for a variety of reasons. Participants in the workshop will identify systemic issues that are preventing adoption of such solutions and suggest how we can change business practices to enable these cybersecurity technology practices to be adopted.
ACT 1, held at Sandia in March 2015, addressed issues associated with barriers to adoption of cybersecurity technologies, focusing specifically on the phishing threat. The approximately 50 workshop participants included government personnel representing nine different entities as well as individuals from Federally Funded Research and Development Centers (FFRDC), academia and industry. ACT 1 had four core groups of attendees: developers/researchers, decision-makers, implementers, and human behavior experts who were divided into four Use Case Groups. Each Use Case Group explored and developed, action plans that addressed the four fundamental cybersecurity mitigation goals derived from the attack life cycle: Device Integrity; Authentication and Credential Protection/Defense of Accounts; Damage Containment; and Secure and Available Transport.
ACT 2 will again divide the four core groups of participants into use case groups to address the four cybersecurity mitigation goals identified above and develop specific action plans over the next year. The agenda will include briefings on a specific threat scenario, briefings on cohorts’ concerns to promote understanding among groups, facilitated sessions that address the use cases, and the development of action plans to be implemented via 90 day spins. Participants will take ownership of the solutions put forward during the workshop, and will brief the Cybersecurity Technology Adoption Organizing Committee every 90 days on the status of their implementation.
More information will be posted on the website as it becomes available: http://cps-vo.org/group/sos/act.
Kathleen Bogner
Intelligence Community Coordinator for Cyber Security Research
Office of the Director of National Intelligence