Ready, Set, Update! Privacy Framework 1.1 + Data Governance and Management Profile Workshop (2024)

EVENTS

Share

NIST is holding this hybrid public workshop to inform an update of the NIST Privacy Framework to version 1.1 and the development of a joint NIST Frameworks Data Governance and Management Profile (DGM Profile). With the release of version 2.0 of the NIST Cybersecurity Framework (CSF), NIST intends to make a modest update to the Privacy Framework to support realignment with the CSF. The update also provides an opportunity to ensure the Privacy Framework is still responsive to current privacy risk management needs since its release four years ago.

Additionally, stakeholders have expressed a desire for a resource to support use of NIST frameworks for privacy, cybersecurity, and artificial intelligence together. With data governance being a starting point for many organizations, NIST has determined to develop the DGM Profile as a way to demonstrate how the NIST Privacy Framework Version 1.0, the NIST AI Risk Management Framework, and the NIST Cybersecurity Framework (CSF) Version 2.0 can be used together. The workshop aims to gather input to ensure Privacy Framework 1.1 and the DGM Profile effectively address stakeholder needs.

The opening plenary will feature expert panels that explore organizational data governance and management approaches and challenges as well as insights for updating the NIST Privacy Framework.Following the plenary, participants will have the opportunity to provide their feedback and perspectives during dedicated breakout sessions for the Privacy Framework 1.1 update and the DGM Profile. Stakeholder input in the workshop will help inform initial public drafts of the Privacy Framework 1.1 and the DGM Profile.

Workshop Inputs:Concept papers for the Privacy Framework 1.1 update and the DGM Profile will be posted in advance of the workshop.

Expected Workshop Outputs:NIST will publish a workshop summary. Stakeholder feedback provided during the workshop will be used to inform initial public drafts of Privacy Framework 1.1 and the DGM Profile.

CPE credits:The International Association of Privacy Professionals (IAPP) has approved up to 7 CPE credits for attending this workshop. Torequestcredits from IAPP, please see thisform.

Sign Up for Updates: Pleasesign up for ourmailing listto receive updates on Privacy Framework 1.1 and the development of the DGM Profile.

If you have any questions, contact PrivacyFramework [at] nist.gov (PrivacyFramework[at]nist[dot]gov)

DRAFT AGENDA | **all times are ET**

Day 1 | Tuesday, June 25

Time
Agenda Item
Type and Location

8:30 – 9:00 AM

Registration

Open to all

9:00 – 9:10 AM

Plenary: Welcome

Opening Remarks

Kevin Stine, Director, Information Technology Laboratory, NIST

Open to all; recorded

Commerce Auditorium

Livestream access

9:10 – 9:30 AM

Plenary: First Session

Charting the Course: Navigating Tech Challenges with NIST Resources

This fireside chat will explore today’s complex, dynamic technology landscape and the numerous challenges facing organizations seeking to harness the value of data. The session will discuss how NIST resources can support cross-functional and interdisciplinary collaboration as well as ethical decision-making to maximize data utility while mitigating impacts to users and organizations.

Open to all; Recorded

Commerce Auditorium

Livestream access

9:30 – 10:30 AM

Plenary: Second Session

NISTifying Data Governance: Developing a Joint NIST Frameworks Data Governance and Management Profile

Many organizations struggle with data governance and management. This panel will examine the pressing need for a resource that takes a consistent approach to data governance and supports use of NIST Frameworks together to better manage privacy, cybersecurity, and AI risks. Speakers will share insights into their approach to data governance and ways to structure a joint NIST Frameworks Data Governance and Management Profile to provide practical guidance for deriving data value responsibly.

Open to all; recorded

Commerce Auditorium

Livestream access

30 min networking break

11:00 AM – 12:00 PM

Plenary: Third Session

Pardon Our Dust: NIST Privacy Framework 1.1 Update

The NIST Privacy Framework (PF) is a “living” document, which evolves to meet stakeholder needs. The time has arrived to update the PF to maintain alignment with the recently updated Cybersecurity Framework (CSF) 2.0. Panelists will share their experiences using PF 1.0 and highlight areas the tool could be improved to facilitate use with CSF 2.0 and meet current privacy risk management needs.

Open to all; recorded

Commerce Auditorium

Livestream access

Lunch Break (12:00 – 1:10 PM)

BREAKOUTS

Each breakout session for the PF 1.1 and DGM Profile will repeat the same topics. Attendees who would like to attend both PF 1.1 and DGM Profile breakouts should select two time slots on the registration page.

1:10 – 2:40 PM

Breakout Session #1 – Hybrid

  • Zoom link will be distributed via email

Closed rooms; no recording

PF 1.1

Room 1414

DGM Profile

Room 1412

Break (2:40 PM – 3:00 PM)

3:00 – 4:30 PM

Breakout Session #2 – Hybrid

  • Zoom link will be distributed via email

Closed rooms; no recording

PF 1.1

Room 1414

DGM Profile

Room 1412

Close of Day 1

Day 2 | Wednesday, June 26

Time
Agenda Item

Type

9:00 – 10:30 AM

Breakout Session #3 – Virtual only

  • Zoom link will be distributed via email

Closed rooms; no recording

PF 1.1

Zoom meeting

DGM Profile

Zoom meeting

Close of Day 2

Post-Workshop

Time
Agenda Item

Type

Recorded and posted after the workshop

Workshop Recap

NIST will summarize key takeaways from the workshop and outline next steps in the PF 1.1 and DGM Profile development.

Recorded

Additional Information for In-Person Attendees:

For Non-US Citizens:Please have your valid passport for photo identification.

For US Permanent Residents: Please have your legal resident permanent card for photo identification.

For US Citizens: Please have your U.S. identification card,state-issued driver's license, or passport.Regarding Real-ID requirements, all states are in compliance or have an extension through May 2025.

Created May 22, 2024, Updated May 30, 2024

Ready, Set, Update! Privacy Framework 1.1 + Data Governance and Management Profile Workshop (2024)
Top Articles
Latest Posts
Article information

Author: Manual Maggio

Last Updated:

Views: 5817

Rating: 4.9 / 5 (49 voted)

Reviews: 88% of readers found this page helpful

Author information

Name: Manual Maggio

Birthday: 1998-01-20

Address: 359 Kelvin Stream, Lake Eldonview, MT 33517-1242

Phone: +577037762465

Job: Product Hospitality Supervisor

Hobby: Gardening, Web surfing, Video gaming, Amateur radio, Flag Football, Reading, Table tennis

Introduction: My name is Manual Maggio, I am a thankful, tender, adventurous, delightful, fantastic, proud, graceful person who loves writing and wants to share my knowledge and understanding with you.