National Online Informative References (OLIR) Program: Program Overview and OLIR Uses

Abstract

Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose. There may be references in this publication to other publications currently under development by NIST in accordance with its assigned statutory responsibilities. The information in this publication, including concepts and methodologies, may be used by federal agencies even before the completion of such companion publications. Thus, until each publication is completed, current requirements, guidelines, and procedures, where they exist, remain operative. For planning and transition purposes, federal agencies may wish to closely follow the development of these new publications by NIST. Organizations are encouraged to review all draft publications during public comment periods and provide feedback to NIST. Many NIST cybersecurity publications, other than the ones noted above, are available at https://csrc.nist.gov/publications.

Summary report for the virtual workshop addressing public comment on NIST cybersecurity for IoT guidance

“…Brady explained that OLIR applies set theory concepts for defining relationships as a mechanism to reduce subjectivity and retains the identity of the SME that defined each relationship. The program, defined in NISTIRs 8278 [NISTIR8278] and 8278A [NISTIR8278A], has a standardized process for submitting OLIRs to be added to the database. He noted that documentation of an IR in OLIR does not demonstrate certification or compliance to the NIST document in question.…”

National Online Informative References(OLIR) program :

“…This section provides instructions and guidance to Developers for completing the OLIR Template for an Informative Reference. 2 The Developer SHALL complete the General Information and Relationships tabs of the OLIR Template. The Developer SHALL use the OLIRVal tool to ensure syntactic compliance with the specifications in this publication and the OLIR Template.…”