[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Agenda for CVE Board Meeting June 28

I wanted to bring up the apple CVEs as well for open source like the SQLite stuff (see oss-sec archives).


On Jun 28, 2017, at 08:42, Adinolfi, Daniel R <dadinolfi@mitre.org> wrote:



Here is the agenda for the CVE Board teleconference on Wednesday, June 28 at 2PM - 4PM.




The CVE Team






CVE Board Meeting 28 June 2017




2:00 – 2:05: Introductions, action items from the last meeting – Chris Coffin

2:05 – 2:25: Working Groups

            Strategic Planning - Chris Coffin/Daniel Adinolfi



                        Board Decisions

            Automation - Harold Booth/Kurt Seifried



                        Board Decisions

2:25 – 2:50: CNA Update

            DWF – Kurt Seifried



                        Board Decisions

            General - Dan Adinolfi



                        Board Decisions

2:50 – 3:20: CNA Rules Revision Process Overview - Dan Adinolfi

            Goal: Describe how the Board and CNAs will review the CNA Rules and begin that process. See Rules Process below.

            Actions: 1) Decide on specific schedule for weekly review. 2) Board should add any additional Rules update suggestions to the list before COB 6/30.

3:20 – 3:30: Researcher Reservation Guidelines Document Review Kick-off

            Goal: Review and update Research Reservation Guidelines

            Actions: 1) Board will be sent the current draft. They will have two weeks to comment. 2) MITRE will have a week after that comment period to incorporate the comments and share the updated version for final approval.

3:30 – 3:55: Open discussion – CVE Board

3:55 – 4:00: Action items, wrap-up – Dan Adinolfi






Create a template for submissions to the CNA Rules revision process.

  - Goal

  - Proposed solution

  - Expected outcome

  - Proposed language (optional)


First 30 days

  - open comment period

  - Board and CNAs

  - Use above format for revisions

  - 2 or 3 conference calls


 Next 60 days

  - 1 week sprints with a subset of the proposed revisions each sprint. Each subset is only to be discussed during that sprint.

  - 8 total sprints.

  - At the end of a sprint, if something wasn't resolved or discussed, it will not be included in this revision.

  - At the end of all sprints, the document will be finalized and sent to the Board for approval.


Proposed: New Rules go into effect on Jan 1, 2018





Page Last Updated or Reviewed: June 28, 2017