Fed Roundup: December 2021

DISA News

• Former chief of staff Laura Radney became DISA’s first Culture and Employee Engagement Program Director

STIG Updates

• Draft Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Security Content Automation Protocol (SCAP) benchmark
• Redis Enterprise 6.x Security Technical Implementation Guide (STIG)
• Mozilla Firefox Security Technical Implementation Guide (STIG) Version 6
• Ivanti MobileIron Core MDM Server Security Technical Implementation Guide (STIG)
• VMware Workspace ONE UEM Security Technical Implementation Guide (STIG), Version 2, Release 1

NIST News

Announcements:

• None

Special Publications & Updates:

• Draft NISTIR 8403, “Blockchain for Access Control Systems”
• NICE has released a second draft of NISTIR 8355, NICE Framework Competencies: Assessing Learners for Cybersecurity Work
• Major update to SP 800-160 Volume 2, Revision 1, “Developing Cyber-Resilient Systems: A Systems Security Engineering Approach.”
• The National Cybersecurity Center of Excellence (NCCoE) has released a new draft project description on “Secure IPv6-Only Implementation in the Enterprise”
• Draft NIST Cybersecurity White Paper – Combination Frequency Differencing

NIAP News

Updates & Announcements:

• None

Protection Profile Posting:

• NIAP has announced a call for interested parties to participate in a Technical Community (TC) for the update of the General Purpose Operating System Protection Profile v4.3
• NIAP has announced a call for interested parties to participate in a Technical Community (TC) for the update of the Mobile Device Fundamentals Protection Profile v3.3
• NIAP has announced a call for interested parties to participate in a Technical Community (TC) for the development of a Protection Profile for Privileged Access Management (PAM)