SESSION ID: #RSACNaomi LefkovitzThe NIST Privacy Framework: What It Is and What It Means for YouPRV-W10 Senior Privacy Policy AdvisorNISTKevin StineChief, Applied Cybersecurity DivisionNIST#RSACSession Overview 2 Background and status of the NIST Privacy Framework Review of the NIST Privacy Framework outline and Request for Information (RFI) analysis Resources for engagementNIST Privacy Framework:Background and Status#RSACWhy NIST? 4 Long track record of successfully, collaboratively working with public and private sectors Experience developing the Cybersecurity Framework Extensive privacy expertise #RSACWhy a privacy framework? 5 Designing, operating, or using technologies in ways that are mindful of diverse privacy needs in an increasingly connected and complex environment Multiplying visions for how to address privacy challenges inside and outside the U.S. Good cybersecurity doesn’t solve it all#RSACWhat will the framework look like? 6Collaborative Effort #RSAC Compatible and Interoperable 7 #RSAC Benefits of Framework Attributes 8 #RSACProcess to Date 9 Workshop #1Austin, TXOct 16, 2018 Request for InformationNov 14, 2018 –Jan 14, 2019 RFI WebinarNov 29, 2018 RFI Analysis & Annotated OutlineFeb 2019 ONGOING ENGAGEMENTFeedback encouraged and promoted throughout the process#RSACUpcoming Opportunities to Engage 10LiveWebinar: Outlining the Privacy FrameworkThursday, March 14, 2019 Drafting the NIST Privacy Framework: Workshop #2Monday, May 13 -Tuesday, May 14,2019Hosted by Georgia Tech Scheller College of BusinessAtlanta, Georgia