Subject: [saag] SACM BoF Summary

From: "Moriarty, Kathleen" <[email-masked]>
Date: Thu, 8 Nov 2012 13:57:56 -0500

SACM BoF -- Security Automation and Continuous Monitoring
Tuesday morning
BoF Chairs: Kathleen Moriarty & Dan Romascanu

The SACM BoF went very well, providing an overview of the problem space and proposed architecture for security automation and continuous monitoring (SACM).  The set of drafts presented included some that have been previously published through NIST and have been put into drafts.  The work includes formats and protocols to represent assets, assess systems, map them to policies, and report.

People mostly agree that the problem space is understood.
There were 10 people who said they were willing to be editors and about 17 reviewers.

The consensus was to start from requirements and then develop an architecture to explain how the use cases can be met.  The group has a fairly good understanding of the problem space, but needs to document this and present it more clearly with the requirements, then the architecture.  These steps need to happen to progress the work.

More detailed minutes should be posted soon.