National Online Informative References (OLIR) Program: NISTIRs 8278 and 8278A Published

 NISTIR 8278National Cybersecurity Online Informative References (OLIR)
Program: Program Overview and OLIR Uses
, describes the
OLIR Program, what OLIRs are, what benefits they provide, how anyone
can search and access OLIRs, and how subject matter experts can contribute
OLIRs. This report includes:

  • Additional Focal Document
  • Functional enhancements to the
    OLIR Catalog and Derived Relationships Mapping (DRM) display tool

NISTIR 8278ANational Cybersecurity Online Informative References (OLIR)
Program: Submission Guidance for OLIR Developers
, replaces NISTIR
8204. The primary focus of NISTIR 8278A is to instruct Developers on how
to complete the OLIR Focal Document spreadsheet when submitting an Informative
Reference to NIST for inclusion in the OLIR Catalog. This report includes:

  • Requirement guidance to include
    additional focal document templates introduced in NISTIR 8278.
  • A “Strength of Relationships”
    section (3.2.11) that includes guidance for populating the magnitude field
    when evaluating focal and reference document elements.  Interested
    commenters should read the ‘Note to Reviewers’ (page iii) as we seek
    feedback on this requested feature describing additional detail about the

publications are based on feedback received from early adopters as well as
discussions at the December 2019
OLIR workshop


8278 details:

8278A details:

Workshop (December 2019):