Open Security Controls Assessment Language

4th Annual OSCAL Conference and Workshop

Tuesday May 23, 2023

9:o0 am EDT [10]

6:o0 am PDT [10]

Opening Remarks

 André Mendes, CIO, DoC

n confirmed

9:10 am EDT [10]

6:10 am PDT [10]

Conference Overview

Michaela Iorga, OSCAL Strategic Outreach Director, NIST

n confirmed

9:20 am EDT [25]

6:20 am PDT [25]

OSCAL and a New Way of Doing Software in Federal

 Robert Wood, CISO, Center for Medicare and Medicaid Services, HHS

n confirmed

9:45 am EDT [25]

6:45 am PDT [25]

What is New in OSCAL 

Michaela Iorga, OSCAL Strategic Outreach Director, NIST

Alexander (A.J.) Stein, OSCAL Technical Director (acting), NIST

n confirmed

n confirmed

10:10 am EDT [15] Break

10:25 am EDT [45]

7:25 am PDT [45]

CIS’ Security Controls in OSCAL

 Phyllis Lee, VP, Center of Internet Security

n confirmed

CSA CCM v4 in OSCAL

 Daniele Catteddu, CTO, Cloud Security Alliance

n confirmed

The Roadmap to CIS-CSA Control Mapping in OSCAL

 Moderator: Chris Compton, Senior IT Specialist, OSCAL team, NIST 

 Phyllis Lee, VP, Center of Internet Security

 Daniele Catteddu, CTO, Cloud Security Alliance

n confirmed

n confirmed

n confirmed

11:10 pm EDT [25]

 8:10 am PDT [25]

Integrate OSCAL with Other Supported Standards Using Metanorma

 Ronald Tse, Founder and CEO, Ribose Inc.

n confirmed

11:35 pm EDT [25]

 8:35 am PDT [25]

Streamlining StateRAMP’s Deliverables with OSCAL

 Kenny Scott, Co-founder & CEO, Paramify

n confirmed

12:00 pm EDT [60] Announcement (BR) & Lunch Break

1:00 pm EDT [25]

10:00 am PDT [25]

From Artisanal to Industrial – Delivering Security at Scale

 Phil Venables, CISO, Google Cloud

n confirmed

1:25 pm EDT [25]

10:25 am PDT [25]

Google’s Internal OSCAL Adoption 

Vikram Khare, Director, Cont. Assurance and Controls Eng., Google

Valentin Mihai, Technical Lead, Cont. Assurance and Controls Eng., Google

n confirmed

n confirmed

1:50 pm EDT [25]

10:50 am PDT [25]

OSCAL - The future of On Demand Assurance

Chris (Rocky) Campione, Sr. Manager, Security and Compliance US Regulated 

Industries, AWS

n confirmed

2:15 pm EDT [25]

11:15 am PDT [25]

OSCAL Supporting Cloud Certification in the EU – MEDINA Project

 Dr. Jesus Luna Garcia, Cybersecurity Governance | Technical Manager, 

 Robert Bosch GmbH | EU-MEDINA Project

n confirmed 

2:40 pm EST [25]

11:40 am PST [25]

Collaborative Compliance Agile Authoring

Anca Sailer, Distinguished Engineer, IBM Research

n confirmed

3:05 pm EDT [15] Break

3:20 pm EST [25]

12:20 pm PST [25]

OSCAL By-Component: Turtles, All the Way Down?

Adam Brand, Partner - Cybersecurity, KPMG

n confirmed

3:45 pm EST [40]

12:45 pm PST [40]

OSCAL Developers’ Fireside Chat

 Moderator: Alexander Stein, OSCAL Technical Director (acting), NIST

 Brian Ruf, Director of Cybersecurity, Easy Dynamics

 Travis Howerton, CTO, RegScale

 Stephanie Lacy, Senior Solutions Architect, Telos

 Valinder Mangat, Chief Innovation Officer, DTR Strategies

n confirmed

n confirmed

n confirmed

n confirmed

n confirmed

4:25 pm EST [25]

1:25 pm PST [25]

OSCAL in Practice – A Case Study for Kubernetes

 Robert Ficcaglia, Chair, Kubernetes Policy Workgroup, Lead Assessor, CNCF Security

Technical Advisory Group, CTO, SunStone Secure, LLC.

 Francesco Beltramini, Security Engineering Manager, ControlPlane

n confirmed

n confirmed

4:50 pm EST [10]

1:50 pm PST [10]

Closing remarks and Adjourn

 Matthew Scholl, Chief, Computer Security Division, NIST

n confirmed