Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Security and Privacy Advisory Board (ISPAB) January 2026 Meeting

Banner Announcing Hybrid ISPAB Meeting January 21-22, 2026
The Information Security and Privacy Advisory Board (ISPAB) is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security (DHS), and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including through review of proposed standards and guidelines developed by NIST.

View or download the Federal Register Notice (FRN) announcing this meeting.

Meeting Minutes are available to review and/or download.

Recordings: 

Day 1  Day 1 of the January 2026 ISPAB Meeting Day 2 Day 2 of the January ISPAB Meeting

Selected Presentations
January 21, 2026 Type
10:15 AM ITL Update
Kevin Stine
Presentation
11:45 AM Agentic AI: Emerging Threats, Mitigations, and Challenges
John Sotiropoulos
Presentation
1:30 PM Cryptographic Module Validation Program (CMVP) Status and Future Plans
David Hawes
Presentation
2:15 PM Secure Software Development Framework Update and DevSecOps Project
Harold Booth
Presentation
January 22, 2026 Type
10:00 AM Initial Public Draft NIST IR 8587: Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
Ryan Galluzzo
Andrew Regenscheid
Presentation
10:45 AM NIST Cybersecurity and Privacy Update - CSD
Jon Boyens
Presentation
11:00 AM NIST Cybersecurity and Privacy Update - ACD
Julie Chua
Presentation
11:30 AM GAO Cybersecurity Assessment Methodology
Tammi Kalugdan
Presentation
1:15 PM Secure by Design: A Guide to Assessing Software Security Practices
Curt Dukes
Phylllis Lee
Presentation

Event Details

Starts: January 21, 2026 - 10:00 AM EST
Ends: January 22, 2026 - 04:30 PM EST

Format: Hybrid Type: FACA Advisory Board/Committee Meeting

Agenda

Attendance Type: Open to public
Audience Type: Industry, Government, Academia, Other


Location

National Cybersecurity Center of Excellence (NCCoE),
9700 Great Seneca Highway, 
Rockville, MD 20850

Parent Project

See: ISPAB
Created November 24, 2025, Updated March 16, 2026