Open Security Controls Assessment Language 

AGENDA – Virtual Event

DAY 1: Tuesday March 1, 2022

11:o0 am EST [10]

8:o0 am PST [10]

Welcome, Introduction and Administrative issues

 Matthew Scholl, Chief, Computer Security Division, NIST

 BlueJeans vAuditorium

11:10 am EST [30]

8:10 am PST [30]

Visionary Keynote

André Mendez, CIO, DoC

 BlueJeans vAuditorium

11:40 am EST [40]

8:40 am PST [40]

What is OSCAL and Who Needs It

Dr. Michaela Iorga, OSCAL Strategic Outreach Director, NIST

David Waltermire, OSCAL Technical Director, NIST

 BlueJeans vAuditorium

12:20 am EST [10]

9:20 am PST [10]

Coffee Break with Q&A  BlueJeans vAuditorium

12:30 pm EST[30]

 9:30 am PST [30]

FedRAMP Automation

Zach Baldwin, Program Manager for Strategy, Innovation, and Technology,

 FedRAMP, GSA

Gary Gapinski, Security and XML Engineer, Flexion Inc.

Thomas Volpe Sr., CIO, VITG Inc.

 BlueJeans vAuditorium

 1:05 pm EST [75]

10:05 am PST [75]

Active Lunch Break (Parallel Tracks)

 1:05 pm EST [10]

10:05 am PST [10]

Break - Bring your Lunch Bag 

 1:15 pm EST [30]

10:15 am PST [30]

Track 1: OSCAL from Zero to Automation Hero

Alexander (AJ) Stein, OSCAL team member, NIST

Dr. Wendell Piez, OSCAL team member, NIST 

 BlueJeans vRoom1

Track 2: Achieving Continuous Authorization to Operate (ATO) with 

 OSCAL

Jasson Walker, President, cFocus Software

 BlueJeans vRoom2

Track 3: DevSecComp(liance)Ops with OSCAL

Ray Gauss, Director of Innovation, Easy Dynamics 

 BlueJeans vRoom3

1:45 pm EST [30]

10:45 am PST [30]

Track 4: OSCAL Tools: Open Source XSLT for OSCAL

Dr. Wendell Piez, OSCAL team member, NIST 

 BlueJeans vRoom1

Track 5: Leveraged Authorizations to Operate

Jasson Walker, President, cFocus Software 

 BlueJeans vRoom2

Track 6: Accelerating FedRAMP, FISMA and CMMC ATO’s with OSCAL

Gaurav (GP) Pal, Principal/SME, StackArmor

Martin Rieger, Chief Solutions Officer, StackArmor

 BlueJeans vRoom3

2:15 pm EST [05]

11:15 am PST [05]

Break - Reconvening  BlueJeans vAuditorium

2:20 pm EST [30]

11:20 am PST [30]

Bloss🌺🌺m - Security Assessment Automation with OSCAL

 Alexander (AJ) Stein, OSCAL team member, NIST

Nikita Wootten, OSCAL team member, NIST

 BlueJeans vAuditorium

2:50 pm EST [30]

11:50 pm PST [30]

NIST SP 800-53: Empowered by OSCAL

Victoria Pillitteri, Group Manager, ITL/CSD, NIST

 BlueJeans vAuditorium

OSCAL
DAY 1: Tuesday March 1, 2022 – cont.

3:20 pm EST [10]

12:20 pm PST [10]

Coffee Break  BlueJeans vAuditorium

3:30 pm EST [30]

12:30 pm PST [30]

Automate the Transition to NIST SP 800-53 Rev. 5 with OSCAL

Jasson Walker, President, cFocus Software

 BlueJeans vAuditorium

4:o0 pm EST [30]

1:00 pm PST [30]

No Silver Bullets - CMS’s Multi-pronged Approach to Eliminate 

ATO Burden

Robert Wood, CISO, Center of Medicare and Medicaid Services, HHS

 BlueJeans vAuditorium

4:30 pm EST [10]

1:30 pm PST [10]

Day 1 Closing Remarks and Adjourn  BlueJeans vAuditorium

4:40 pm EST [05]

1:40 pm PST [05]

Transition to Virtual Happy Hour (optional)  BlueJeans vAuditorium

4:45 pm EST [30]

1:45 pm PST [30]

Virtual Happy Hour (optional): Birds of a feather

 Open Floor Discussions

 BlueJeans vRoom1

OSCAL
DAY 2: Wednesday March 2, 2022

11:o0 am EST [05]

8:o0 am PST [05]

Opening Remarks

Dr. Michaela Iorga, OSCAL Strategic Outreach Director, NIST

 BlueJeans vAuditorium

11:o5 am EST [30]

8:o5 am PST [30]

Exchange Protocol for Third Party Tool Integrations via OSCAL 

(IBM)

Anca Sailer, SME, STSM, IBM Research

Vikas Agarwal, Ph.D., Senior Researcher, SME, IBM Research

Lou DeGenaro, Senior Engineer, IBM Research

 BlueJeans vAuditorium

11:35 am EST [30]

8:35 am PST [30]

Initial Experiences with OSCAL and Continuous Monitoring in the EU 

Cybersecurity Certification Scheme for Cloud Services

Dr. Jesus Luna Garcia, Bosch, Germany

 BlueJeans vAuditorium

12:05 am EST [10]

9:05 am PST [10]

Coffee Break with Q&A

12:15 pm EST [30]

 9:15 am PST [30]

AWS and Implementation of OSCAL

Matthew Donkin, SME, AWS

Douglas Boldt, Solutions Architect, AWS

 BlueJeans vAuditorium

12:45 pm EST [30]

9:45 am PST [30]

Adopting OSCAL to Deliver the Latest NIST SP 800-53 Control 

Catalog to the CSAM Community

Ramon Burks, CSS Assistant Director, DoJ/CSAM

Adam Oline, Technical Lead, CyberBalance, LLC, DoJ/CSAM

 BlueJeans vAuditorium 

 1:15 pm EST [75]

10:15 am PST [75]

Active Lunch Break (Parallel Tracks)

 1:15 pm EST [10]

10:15 am PST [10]

Break - Bring your Lunch Bag 

1:25 pm EST [30]

10:25 am PST [30]

Track 1: OSCAL Deep Diff Tool

Nikita Wootten, OSCAL team member, NIST

 

 BlueJeans vRoom1

Track 2: Ignyte Assurance Platform OSCAL Component Aggregation 

Techniques

 Max Aulakh, Managing Director, Ignyte Assurance Platform 

 BlueJeans vRoom2

Track 3: “TURBOTAX-STYLE” Authoring of OSCAL Files

 Valinder Mangat, CIO, DRT Strategies

 BlueJeans vRoom3

1:55 pm EST [30]

10:55 am PST [30]

Track 4: Entertainment – NIST documentaries

 

 BlueJeans vRoom1

Track 5: Continuous ATO Demonstration using OSCAL with Automated 

Assessments and Risk Modeling

 J. Travis Howerton, Co-Founder and CTO, RegScale

 BlueJeans vRoom2

Track 6: Getting a Head Start on Automating Your FedRAMP ATO Using 

OSCAL in Xacta360

 Jet Ryan, XACTA Solutions Architect, Telos

 BlueJeans vRoom3

2:25 pm EST [05]

11:25 am PST [05]

Break - Reconvening

2:30 pm EST [30]

11:30 am PST [30]

Kubernetes Policy Result Standardization via OSCAL (IBM) 

Anca Sailer, SME, STSM, IBM Research

Jaya Ramanathan, Ph.D., Chief Security and Governance Architect, Red Hat

Jim Bugwadia, CEO, Nirmata

Robert Ficcaglia, CTO, SunStone Secure

 BlueJeans Auditorium

OSCAL
DAY 2: Wednesday March 2, 2022 – cont.

3:00 pm EST [30]

12:00 pm PST [30]

Leading with OSCAL: The crystallization of OSCAL-enabled 

commercial sector use case 

Adam Brand, Managing Director, KPMG

Thomas Nash, Director, KPMG 

 BlueJeans vAuditorium

3:30 pm EST [30]

12:30 pm PST [30]

The Applicability of OSCAL for Healthcare 

Vikas Khosla, Chief Digital Health Officer, Intraprise Health 

 BlueJeans vAuditorium

4:00 pm EST [10]

1:00 pm PST [10]

Coffee Break

4:10 pm EST [30]

1:10 pm PST [30]

Continuous, Automated Compliance with OSCAL

Conner Phillippi, Senior Compliance Solutions Manager,

 Product Manager, Secureframe

Apostolos Delis, Software Engineer, Secureframe

 BlueJeans vAuditorium

4:40 pm EST [20]

1:40 pm PST [20]

OSCAL Roadmap: From Strategy to Vision

David Waltermire, OSCAL Technical Director, NIST

 BlueJeans vAuditorium

5:00 pm EST [10]

2:00 pm PST [10]

Closing Remarks and Adjourn

Matthew Scholl, Chief, Computer Security Division, NIST

 BlueJeans vAuditorium

OSCAL