National Online Informative References(OLIR) program :

Abstract

Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose. There may be references in this publication to other publications currently under development by NIST in accordance with its assigned statutory responsibilities. The information in this publication, including concepts and methodologies, may be used by federal agencies even before the completion of such companion publications. Thus, until each publication is completed, current requirements, guidelines, and procedures, where they exist, remain operative. For planning and transition purposes, federal agencies may wish to closely follow the development of these new publications by NIST. Organizations are encouraged to review all draft publications during public comment periods and provide feedback to NIST. Many NIST cybersecurity publications, other than the ones noted above, are available at https://csrc.nist.gov/publications.

National Online Informative References (OLIR) Program: Program Overview and OLIR Uses

“…An OLIR is formatted according to a simple standard defined by NIST IR 8278A, National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers (NISTIR 8278A) [2], and is displayed in a centralized location -the OLIR Catalog. By following this approach, document owners can use the OLIR Program as a mechanism for communicating with owners and users of other documents.…”

“…The purpose of this document is to describe the National OLIR Program and explain the use, benefits, and management of the OLIR Catalog-the online location for sharing OLIRs-for both the SMEs contributing OLIRs to it and the Catalog's users. The content of this document complements that of NISTIR 8278A [2], which provides additional information for the SMEs defining OLIRs and submitting them to the National OLIR Program. SMEs should read this document first, then NISTIR 8278A.…”

“…The National OLIR Program also defines a formal process for vendors and other OLIR Developers to submit OLIRs to NIST [2]. This process includes guidance for creating highquality, more usable, better documented OLIRs.…”

“…The OLIR Catalog contains two types of information on the relationships between Focal Documents and Reference Documents: Informative References and Derived Relationship Mappings. These relationships are organized as Reference Data via the OLIR Catalog according to the vetting processes delineated in NISTIR 8278A [2] with the objective of providing transparency from the Informative Reference Developers for reproducibility and discussion by Users.…”

“…These DRM relationships, which are defined in NISTIR 8278A [2], do not indicate the relationships among the Reference Documents. Therefore, in reference to Figure 3, if an organization implements Document 1 -Element A, that does not necessarily mean it is also implementing Document 2 -Element B.…”