Draft CNA document for discussion

• To: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
• Subject: Draft CNA document for discussion
• From: "Adinolfi, Daniel R" <dadinolfi@mitre.org>
• Date: Tue, 17 May 2016 14:12:44 +0000
• Accept-language: en-US
• Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=mitre.org;
• Delivery-date: Tue May 17 13:00:05 2016
• List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• Sender: <owner-cve-editorial-board-list@lists.mitre.org>
• Spamdiagnosticmetadata: NSPM
• Spamdiagnosticmetadata: 43da9c421be74aed97248473db21fd15
• Spamdiagnosticoutput: 1:23
• Spamdiagnosticoutput: 1:2
• Thread-index: AQHRsEYu1auAXfmn1U+mRc2qLMwwOw==
• Thread-topic: Draft CNA document for discussion
• User-agent: Microsoft-MacOutlook/f.16.0.160506

Folks,

I have uploaded this DRAFT CNA Information Sharing and Embargo Policies 
document to GitHub.

<http://cveproject.github.io/docs/cna/DRAFT%20-%20Information%20Sharing%20and%20Embargo%20Policies.docx>

The idea is to have each CNA describe when and to whom they will 
disclose information submitted to the CNA, both internally to the CNA 
and to the world.

The linked document is a starting point for that and will be part of 
the bigger CNA framework and documentation effort. (This is one of many 
documents we'll produce as part of that.) Please consider it a strawman 
to begin the discussion.

Thanks.

-Dan
_________________________
Daniel Adinolfi, CISSP
Lead Cybersecurity Engineer, The MITRE Corporation
J83D - Cyber Security Partnerships, Sharing, and Automation
Email: <dadinolfi@mitre.org>  Phone: 781-271-5774

• Follow-Ups:
  • Re: Draft CNA document for discussion
    • From: Kurt Seifried <kseifried@redhat.com>

• Prev by Date: Re: CNA requirements
• Next by Date: RE: CNA requirements
• Previous by thread: Also an update for the Linux CNAs
• Next by thread: Re: Draft CNA document for discussion
• Index(es):
  • Date
  • Thread