SUPPLEMENTARY INFORMATION:

Pursuant to the Federal Advisory Committee Act, as amended, 5 U.S.C. App., notice is hereby given that the Information Security and Privacy Advisory Board (ISPAB) will meet Wednesday, March 23, 2016, from 8:30 a.m. until 5:00 p.m. Eastern Time, Thursday, March 24, 2016, from 8:30 a.m. until 5:00 p.m. Eastern Time, and Friday, March 25, 2016, from 8:30 a.m. until 12:00 p.m. Eastern Time. All sessions will be open to the public. The ISPAB is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security, and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including thorough review of proposed standards and guidelines developed by NIST. Details regarding the ISPAB's activities are available at http://csrc.nist.gov/​groups/​SMA/​ispab/​index.html.

The agenda is expected to include the following items:

—Presentation from U.S. Department of Homeland Security, National Protection and Programs Directorate,

—Updates on OMB Circular No. A-130 Revised, Management of Federal Information Resources,

—Legislative updates relating to security and privacy,

—Overview on Information Sharing and Analysis Organization (ISAO), information sharing in the communications sector, and the Communications Security, Reliability and Interoperability Council (CSRIC),

—Briefing from the U.S. Department of Commerce, Office of Chief Data Officer,

—U.S. Department of Homeland Security, National Cybersecurity Assessment and Technical Services briefing on penetration testing,

—Discussion on password storage with Federal Chief Information Officers,

—Presentation from American Council for Technology and Industrial Advisory Council (ACT-IAC) on Cybersecurity Ideation Initiative Report,

—FedRAMP Updates on “High” baseline security controls,

—Briefing on security and privacy relating to autonomous vehicles,

—Presentation on the United States Cybersecurity Research and Development Plan, and

—Updates on NIST Computer Security Division.

Note that agenda items may change without notice. The final agenda will be posted on the Web site indicated above. Seating will be available for the public and media. No registration is required to attend this meeting.

Public Participation: The ISPAB agenda will include a period of time, not to exceed thirty minutes, for oral comments from the public (Friday, March 25, 2016, between 10:00 a.m. and 10:30 a.m.). Speakers will be selected on a first-come, first-served basis. Each speaker will be limited to five minutes. Questions from the public will not be considered during this period. Members ( print page 9170) of the public who are interested in speaking are requested to contact Annie Sokol at the contact information indicated in the FOR FURTHER INFORMATION CONTACT section of this notice.

Speakers who wish to expand upon their oral statements, those who had wished to speak but could not be accommodated on the agenda, and those who were unable to attend in person are invited to submit written statements. In addition, written statements are invited and may be submitted to the ISPAB at any time. All written statements should be directed to the ISPAB Secretariat, Information Technology Laboratory, 100 Bureau Drive, Stop 8930, National Institute of Standards and Technology, Gaithersburg, MD 20899-8930.