RIUP meeting notes are now available: https://kantara.atlassian.net/wiki/spaces/RIUP/pages/1476165634/2026-01-20+M... Our Zoom number for today didn't work (said it was scheduled for Jan 27, which is a 4th Tuesday), so we used Justin's number. Our apologies if anyone missed that message. Amanda, please check the scheduling for upcoming Zoom Calls for 2026 RIUP meetings. They should be set to the 1st and 3rd Tuesday of the month and may need to be set manually. NIST Releases Control Overlays to Manage Cybersecurity Risks in Use and Developments of AI Systems <https://cybersecuritynews.com/nist-releases-control-overlays/> https://csrc.nist.gov/csrc/media/Projects/cosais/documents/NIST-Overlays-Sec... [image: check mark button] Action items DONE: Noreen to resend the IPCQ and SDA documents to Amanda. ALL: All to review NIST AI security overlay use cases with focus on identity issues that may affect underserved populations. Debbie: We didn't have time to go into the NIST Overlays in much detail, but if you have any additional documents or links to share from the NIST 800-53 call you attended, please reply in this email. On Tue, Jan 20, 2026 at 1:01 PM Justin Byrd <justin@machi-systems.com> wrote:
Howdy,
I took the working group email off this chain…
Can’t get into the room and Jim asked me to set this up. We have 45 min 😊
Join Zoom Meeting
https://us05web.zoom.us/j/5808242769?pwd=NFJ3bXpaV1hCY2F4VVMzTTJtNlRmZz09
Meeting ID: 580 824 2769
Passcode: QZ8efg
-J
---
*Justin Byrd *(He, Him)
PARTNER / PROJECT-LEAD
*E:* justin@machi-systems.com
*P:* 570-820-2060
*M:* *Book a call with me! <https://meetings.machi-systems.com/justin>*
*Machi-Systems, LLC.*
Scranton Life Building
538 Biden St, Suite 528
Scranton, PA 18503
machi-systems.com |
*[image: Logo for the Machi-Systems, LLC. Black text set on transparent background reads, “Machi (Dash) Systems.” Stylized blue “m” at the beginning of the word machi]*
--------------------------------------------------------------------
*Scope Agreement: We will consider this issue resolved when we are able to answer your query, or we will inform you if the issue will be out of scope.*
This message (including any attachments) may contain CONFIDENTIAL information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
*From: *jim kragh <kragh65@gmail.com> *Date: *Tuesday, January 20, 2026 at 11:04 AM *To: *Tom Jones <thomasclinganjones@gmail.com>, "Noreen Whysel. Brett" < nwhysel@gmail.com>, Justin Byrd <justin@machi-systems.com>, Salvatore D'Agostino <sal@idmachines.com>, Simone Alcorn <salcorn@easydynamics.com>, Isha Chhatwal <ichhatwa@gmail.com>, Jorge Flores <jorge@entidad.io>, Bev Corwin <bevcorwin@gmail.com>, Thomas Sullivan <sullivant3@gmail.com>, Jeff Brennan <jeff_brennan@sbcglobal.net>, wg-riup < wg-riup@kantarainitiative.org>, Quinny Sanchez Lopez <qs85@georgetown.edu>, Debbie Bucci <debbucci@gmail.com> *Cc: *Amanda Gay <amanda@kantarainitiative.org>, Kay Chopard Cohen < kay@kantarainitiative.org> *Subject: *Re: RIUP WG meeting tomorrow, Jan 20, 2026; Reminder: we meet the 1st and 3rd Tuesday of the month.
The RIUP call is at 1 PM ET today; Hope you are having a good morning.!
On Mon, Jan 19, 2026 at 10:02 PM jim kragh <kragh65@gmail.com> wrote:
Good evening all and hope all had a nice family and friends centered holiday season.
Our call in link is: http s://us06web.zoom.us/j/85077197313?pwd=PGdbMovUR6xo8K4MtmtCBRwdjwxls5.1 <https://www.google.com/url?q=https://us06web.zoom.us/j/85077197313?pwd%3DPGdbMovUR6xo8K4MtmtCBRwdjwxls5.1&sa=D&source=calendar&ust=1738175276953761&usg=AOvVaw3ErA58GHijk7Qpm1B0t4zr>
Meeting ID: 850 7719 7313 Passcode: 000935
Last week, NIST released an AI Security overly concepts document that interfaces with NIST’s AI Risk Management Framework document. The core functions outlined were:* Governing*, *mapping*, *measuring* and *managing* as detailed in the NIST AI Risk Management Framework (AI RMF) <https://doi.org/10.6028/NIST.AI.100-1> and is also built upon AI risk management efforts by others; see: (Fact Sheet <https://www.nist.gov/document/about-nist-ai-rmf>). I have not read the *NIST. 600-1 "Intelligence Profile"* document, but think it is timely to make it part of our RIUP WG activity. Since it appears that *AI Overlays are part of NIST’s Security Overlay concepts we have some homework to do on how AI Overlays will attempt to profile the underserved population.* The initial AI Overlay news release was made last August and again last week:
https://csrc.nist.gov/csrc/media/Projects/cosais/documents/NIST-Overlays-Sec... and the link to:
https://cybersecuritynews.com/nist-releases-control-overlays/
*Update on the IPCQ (Purpose and Consent Query) and the Subject Delegation Authority (SDA) at the WG meeting, *
*Have a nice evening,* Jim
-- Noreen Whysel nwhysel@gmail.com http://www.whysel.com