<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">G'day <br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">As a result of a presentation at the October meeting of APC on cybersecurity, a group of members has created an advocacy group, the CIO coalition for Open Security, to develop and implement strategies to facilitate a cross industry approach to collaborate in our efforts to thwart the efforts of bad cyber actors.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">The coalition is an assembly of cross industry technology leaders working collaboratively, on a national level, to create a united front in mitigating the risk of cyber-attacks to organizations on both an individual and collective basis. The Coalition believes that the best way to effectively combat ever-increasing cyber threats is through focusing our combined knowledge, resources and efforts to directly target malicious cyber activity. The goal is to identify and implement ways for people, organizations and computers to connect so that collectively we are more intelligent than any single individual, group, or computer.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">At a recent meeting, the small group leading this effort recognized that it needed more information before moving forward. Below is a beginning list of its questions.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><p style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""></p><ul class=""><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">What are various organizations (private, public, etc.) working on open security doing? Who are the participants?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">Which efforts towards open security are successful (e.g., deterring attacks; sharing information on policies, practices, tools)?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">What has been tried unsuccessfully? What are the lessons learned?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">What are the key constraints to open security?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">What are the key objections to open security?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">Which organizations should we consider for collaborative open security efforts?</span><br class=""></font></li><li style="line-height: 17px;" class=""><font size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; line-height: normal;" class="">Which cyber security tools have the most promise?</span><br class=""></font></li></ul><div class=""><br class="webkit-block-placeholder"></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">This group wants to move quickly as information becomes available. It envisions taking an "agile" approach - strategy evolving based on information and learning from actions taken.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">We now seek the help of researchers active in this area to provide answers to these questions within the next three months. Rather than waiting for answers to all their questions (and the questions may change as information becomes available), they would like to work with researchers on an iterative basis. It could take the form of prioritizing questions and getting updates on those questions at a monthly webinar with researchers where the next set of questions is determined based on what is learned.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">The researcher should be flexible and willing to work on an agile basis with monthly calls with this group. Deliverables will probably be ppt slides with answers to that month's questions.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">APC has allocated $20,000 for this project.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">We would like to start this project as soon as possible. As a result, proposals will close at 11:59pm EST on Dec 1.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">Your maximum two-page proposal should detail the case for why the researcher(s) are especially qualified to address questions raised by the coalition</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">Please address your questions to me.</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" size="2" face="georgia, serif" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class=""><br class=""></font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" face="georgia, serif" size="2" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">Rick Watson</font></div><div style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; min-height: 18px;" class=""><font color="#000000" face="georgia, serif" size="2" style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;" class="">APC research director</font></div></body></html>