October 30, 2018 Security Conference Call

Back to Security Main Page

Attendees

Back to Security Main Page

x	Member Name		x	Member Name		x	Member Name		x	Member Name
x	John Moehrke Security Co-chair		x	Kathleen Connor Security Co-chair		x	Alexander Mense Security Co-chair		.	Trish Williams Security Co-chair
x	Christopher Shawn Security Co-chair		x	Suzanne Gonzales-Webb		x	Mike Davis		.	David Staggs
x	Diana Proud-Madruga		.	Johnathan Coleman		.	Francisco Jauregui		.	Joe Lamy
.	Theresa Ardal Connor		.	Greg Linden		.	Grahame Grieve		.	Dave Silver
.	Beth Pumo		x	Jim Kretz		.	Peter Bachman		.	Bo Dagnall

Back to Security Main Page

Agenda

1. (2 min) Roll Call, Agenda Approval
2. (2 min) Review and Approval of Minutes
   • October 23, 2018
3. (15 min) Review last block of TF4FA Vol 1 and 2 Ballot comments: 147 - 161 from TF4FA Recon call Final vote on the last of the dispositions is scheduled for 10/30.
4. (2 min)Update on revision of PASS Audit - Mike/Chris
5. (5 min) TF4FA Trust Framework, Volume 3 - Update Mike
6. (2 min) TF4FA Vol3 and 3 Reaffirmation NIBs and 3 Harmonization Proposals submitted this weekend - Kathleen
7. (15 min) Controlled Unclassified Information (CUI) Harmonization Proposal - Kathleen
8. (10 min) FHIR Security Update - [XSAP 2.0 JSON FHIR Security Labels

and other happenings - John

1. • FHIR-Security call will be alternating between core FHIR Security topics, and work on FHIR Connectathon - Care Plan scenario
2. (5 min) GDPR whitepaper on FHIR Update - Alex

Back to Security Main Page

Meeting Materials

• CUI Rule 32 CFR Part 2002
• SP 800-171A
• CUI Marking Handbook
• CUI Health Information Category
• CUI Registry: Limited Dissemination Controls
• CUI Policy and Guidance
• CUI Glossary
• CUI Updated Training Videos

Introduction to Marking CUI (updated August 6, 2018) Introduction to Marking CUI (updated August 6, 2018) This video provides an overview of how to mark documents, emails, presentations, systems, and other files that contain CUI. It specifically addresses the designation indicator and the CUI banner marking, including the CUI control marking, CUI category markings, and Limited Dissemination Control Markings. It also discusses portion marking, the use of cover sheets, marking multi-page documents, and decontrolling CUI. NIST CUI Security Requirements Workshop 10/18/18 Everything you ever wanted to know about CUI

• CUI Security Requirements Workshop Agenda
• Workshop Video
• Controlled Unclassified Information: Unauthorized Disclosure: Prevention and Reporting

Meeting Minutes DRAFT

Chair, TBD