Hi Chuck Atkins, I'm investigating this right now and I expect to give you a response
by today.
Thanks
----- Original Message -----
From: "Chuck Atkins" <chuck.atkins(a)kitware.com>
To: "SCAP Security Guide" <scap-security-guide(a)lists.fedorahosted.org>
Sent: Monday, August 28, 2017 3:50:53 PM
Subject: Re: CUI profile for EL7
Ping?
----------
Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.
On Tue, Aug 22, 2017 at 5:01 PM, Chuck Atkins < chuck.atkins(a)kitware.com > wrote:
I was looking at the NIST 800-171 profile for Controlled Unclassified Information (CUI)
and it looks like all it does is derive from the OSPP profile. While I'm sure this
profile covers at least what's needed for CUI, inheriting the whole OSPP profile seems
like *way* overkill and the OSPP profile itself describes NIST 800-171 as a subset. Should
the nist-800-171 profile have more rules disabled or is it really that close of an overlap
that the only difference is the inactivity timeout?
----------
Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.
_______________________________________________
scap-security-guide mailing list -- scap-security-guide(a)lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave(a)lists.fedorahosted.org