OVAL Transition Plan Announcement

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

OVAL Transition Plan Announcement

Adam Montville-2
Hi,

For the past year, the OVAL Board in coordination with the Department of Homeland Security (DHS) has been making plans and taking steps to update the way the OVAL language, OVAL Repository and associated mailing lists are managed in order to:
  • Make OVAL a community-run and community-sponsored program, independent of direct U.S. Government sponsorship
  • Make governance and content management more responsive and transparent
  • Upgrade the tools, technologies and processes based on lessons learned over the past decade

The purpose of this message is to provide a status update on this transition and to share the changes that can be expected over the next month.  The official OVAL "transfer" will occur on August 1, 2015.

Both MITRE and the OVAL Board recognize the benefit of having a "home" for OVAL, even though the transition plan is very much focused on collaborative community efforts.  Recently, the Center for Internet Security (CIS) volunteered to steward the community-driven OVAL program, bringing with them critical resources and organizational expertise.  While the OVAL Board will continue to provide strategic direction to the OVAL program, CIS and the OVAL community will manage the day-to-day operations.  The goal of the OVAL Board has been to ensure the most important features of the current OVAL program remain available and are even improved with the new program.  

Below is a brief overview of what can be expected during the transition.  It cannot be understated that the transition planning to date has involved DHS, MITRE, the OVAL Board, CIS, and top contributors.  Nor can it be understated that we anticipate no change to the availability of the content you have come to expect.  We expect to achieve rough feature parity for users of the OVAL Repository and will continue to provide package downloads that are the same as those you find on the current repository. 

OVAL Mailing Lists

The current MITRE-managed mailing lists will no longer be available for posting after July 31, 2015.  CIS will create new mailing lists that are similar in scope to the current MITRE lists.  OVAL Mailing list subscribers will need to register for the new lists.  An email message will be sent to the current lists later this month with instructions on how to register with the new lists. 

Repository

A new repository is being created and will be ready for testing soon.  The MITRE OVAL Repository will no longer take submissions after July 31, 2015, but will likely stay active in a read-only mode for several months after that date.  The transition team is taking lessons-learned from MITRE and working to create an improved OVAL repository.  All top contributors have committed to contribute to the new OVAL Repository and it has been designed to minimize disruption for existing content users. Details about the new repository will be posted to the OVAL mailing lists over the next few weeks.  

OVAL Specification Moderation

The OVAL Board has drafted a plan for OVAL specification moderation.  The goal is to create an environment where the language can evolve in a reliable, timely, and relevant manner.  Once the associated transition plan is approved by the OVAL Board, the details of the plan will be shared with the community on the mailing lists.  There will be plenty of opportunities for those wishing to participate in the growth of the OVAL specifications.

Between now and August 1, 2015, the transition team will be sharing details and answering questions about the transition.  The OVAL Board is confident that OVAL will come through this transition stronger than ever.  We are excited about the prospects of OVAL going forward.

Comments and Questions

Please feel free to post comments or questions regarding this transition to the [hidden email] or the [hidden email].

Kind regards,

Adam Montville
Sr. Director
Security Controls and Automation
Center for Internet Security
31 Tech Valley Drive, Suite 2
East Greenbush, NY 12061

www.cisecurity.org 
Follow us @CISecurity 
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
. . .
To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: OVAL Transition Plan Announcement

Hansbury, Matt

On its way I hope.  ;)

 

Matt

 

From: Adam Montville [mailto:[hidden email]]
Sent: Thursday, July 02, 2015 11:09 AM
To: oval-developer-list OVAL Developer List/Closed Public Discussion
Subject: [OVAL-DEVELOPER-LIST] OVAL Transition Plan Announcement

 

Hi,

 

For the past year, the OVAL Board in coordination with the Department of Homeland Security (DHS) has been making plans and taking steps to update the way the OVAL language, OVAL Repository and associated mailing lists are managed in order to:

  • Make OVAL a community-run and community-sponsored program, independent of direct U.S. Government sponsorship
  • Make governance and content management more responsive and transparent
  • Upgrade the tools, technologies and processes based on lessons learned over the past decade

 

The purpose of this message is to provide a status update on this transition and to share the changes that can be expected over the next month.  The official OVAL "transfer" will occur on August 1, 2015.

 

Both MITRE and the OVAL Board recognize the benefit of having a "home" for OVAL, even though the transition plan is very much focused on collaborative community efforts.  Recently, the Center for Internet Security (CIS) volunteered to steward the community-driven OVAL program, bringing with them critical resources and organizational expertise.  While the OVAL Board will continue to provide strategic direction to the OVAL program, CIS and the OVAL community will manage the day-to-day operations.  The goal of the OVAL Board has been to ensure the most important features of the current OVAL program remain available and are even improved with the new program.  

 

Below is a brief overview of what can be expected during the transition.  It cannot be understated that the transition planning to date has involved DHS, MITRE, the OVAL Board, CIS, and top contributors.  Nor can it be understated that we anticipate no change to the availability of the content you have come to expect.  We expect to achieve rough feature parity for users of the OVAL Repository and will continue to provide package downloads that are the same as those you find on the current repository. 

 

OVAL Mailing Lists

 

The current MITRE-managed mailing lists will no longer be available for posting after July 31, 2015.  CIS will create new mailing lists that are similar in scope to the current MITRE lists.  OVAL Mailing list subscribers will need to register for the new lists.  An email message will be sent to the current lists later this month with instructions on how to register with the new lists. 

 

Repository

 

A new repository is being created and will be ready for testing soon.  The MITRE OVAL Repository will no longer take submissions after July 31, 2015, but will likely stay active in a read-only mode for several months after that date.  The transition team is taking lessons-learned from MITRE and working to create an improved OVAL repository.  All top contributors have committed to contribute to the new OVAL Repository and it has been designed to minimize disruption for existing content users. Details about the new repository will be posted to the OVAL mailing lists over the next few weeks.  

 

OVAL Specification Moderation

 

The OVAL Board has drafted a plan for OVAL specification moderation.  The goal is to create an environment where the language can evolve in a reliable, timely, and relevant manner.  Once the associated transition plan is approved by the OVAL Board, the details of the plan will be shared with the community on the mailing lists.  There will be plenty of opportunities for those wishing to participate in the growth of the OVAL specifications.

 

Between now and August 1, 2015, the transition team will be sharing details and answering questions about the transition.  The OVAL Board is confident that OVAL will come through this transition stronger than ever.  We are excited about the prospects of OVAL going forward.

 

Comments and Questions

 

Please feel free to post comments or questions regarding this transition to the [hidden email] or the [hidden email].

 

Kind regards,

 

Adam Montville

Sr. Director

Security Controls and Automation

Center for Internet Security

31 Tech Valley Drive, Suite 2
East Greenbush, NY 12061

Follow us @CISecurity 

This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
. . .

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: OVAL Transition Plan Announcement

Hansbury, Matt

Apologies folks…that was clearly not intended for this list. 

 

Matt

 

From: Hansbury, Matt [mailto:[hidden email]]
Sent: Monday, July 06, 2015 10:44 AM
To: oval-developer-list OVAL Developer List/Closed Public Discussion
Subject: Re: [OVAL-DEVELOPER-LIST] OVAL Transition Plan Announcement

 

On its way I hope.  ;)

 

Matt

 

From: Adam Montville [[hidden email]]
Sent: Thursday, July 02, 2015 11:09 AM
To: oval-developer-list OVAL Developer List/Closed Public Discussion
Subject: [OVAL-DEVELOPER-LIST] OVAL Transition Plan Announcement

 

Hi,

 

For the past year, the OVAL Board in coordination with the Department of Homeland Security (DHS) has been making plans and taking steps to update the way the OVAL language, OVAL Repository and associated mailing lists are managed in order to:

  • Make OVAL a community-run and community-sponsored program, independent of direct U.S. Government sponsorship
  • Make governance and content management more responsive and transparent
  • Upgrade the tools, technologies and processes based on lessons learned over the past decade

 

The purpose of this message is to provide a status update on this transition and to share the changes that can be expected over the next month.  The official OVAL "transfer" will occur on August 1, 2015.

 

Both MITRE and the OVAL Board recognize the benefit of having a "home" for OVAL, even though the transition plan is very much focused on collaborative community efforts.  Recently, the Center for Internet Security (CIS) volunteered to steward the community-driven OVAL program, bringing with them critical resources and organizational expertise.  While the OVAL Board will continue to provide strategic direction to the OVAL program, CIS and the OVAL community will manage the day-to-day operations.  The goal of the OVAL Board has been to ensure the most important features of the current OVAL program remain available and are even improved with the new program.  

 

Below is a brief overview of what can be expected during the transition.  It cannot be understated that the transition planning to date has involved DHS, MITRE, the OVAL Board, CIS, and top contributors.  Nor can it be understated that we anticipate no change to the availability of the content you have come to expect.  We expect to achieve rough feature parity for users of the OVAL Repository and will continue to provide package downloads that are the same as those you find on the current repository. 

 

OVAL Mailing Lists

 

The current MITRE-managed mailing lists will no longer be available for posting after July 31, 2015.  CIS will create new mailing lists that are similar in scope to the current MITRE lists.  OVAL Mailing list subscribers will need to register for the new lists.  An email message will be sent to the current lists later this month with instructions on how to register with the new lists. 

 

Repository

 

A new repository is being created and will be ready for testing soon.  The MITRE OVAL Repository will no longer take submissions after July 31, 2015, but will likely stay active in a read-only mode for several months after that date.  The transition team is taking lessons-learned from MITRE and working to create an improved OVAL repository.  All top contributors have committed to contribute to the new OVAL Repository and it has been designed to minimize disruption for existing content users. Details about the new repository will be posted to the OVAL mailing lists over the next few weeks.  

 

OVAL Specification Moderation

 

The OVAL Board has drafted a plan for OVAL specification moderation.  The goal is to create an environment where the language can evolve in a reliable, timely, and relevant manner.  Once the associated transition plan is approved by the OVAL Board, the details of the plan will be shared with the community on the mailing lists.  There will be plenty of opportunities for those wishing to participate in the growth of the OVAL specifications.

 

Between now and August 1, 2015, the transition team will be sharing details and answering questions about the transition.  The OVAL Board is confident that OVAL will come through this transition stronger than ever.  We are excited about the prospects of OVAL going forward.

 

Comments and Questions

 

Please feel free to post comments or questions regarding this transition to the [hidden email] or the [hidden email].

 

Kind regards,

 

Adam Montville

Sr. Director

Security Controls and Automation

Center for Internet Security

31 Tech Valley Drive, Suite 2
East Greenbush, NY 12061

Follow us @CISecurity 

This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
. . .

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DEVELOPER-LIST in the BODY of the message. If you have difficulties, write to [hidden email].