Blockchain is NOT in CISSP CBK 2018

[AMWestgate]

I was a bit surprised to see Blockchain is not part of the 2018 CISSP CBK.  I would expect that it be included with the section 3.9 Cryptography as part of non-repudiation.  Perhaps not enough people mentioned working in blockchain in the work force surveys leading to the 2018 update.

Do you expect that over the next 3 years blockchain will grow in prominence ?

Do you think GDPR will kill blockchain?  There are a few good articles out there that explain this issue.  Here's one by Tripwire https://www.tripwire.com/state-of-security/security-data-protection/blockchain-gdpr/ 

I look forward to hearing your views!

[Beads]

There has been some promising research in the use of blockchain technologies in healthcare and stock transfers but down here in the trenches I don't see it in use yet, just theory level at this point.

If you are currently working with this technology on a regular basis I am sure others would also like to hear your thoughts on the subject. For now, I don't foresee this technology going mainstream anytime soon, though I may be very well wrong on this point.

Yes, I work in the healthcare technology practice of security.

[rslade]

Having studied blockchain in some depth, particularly the crypto and database design aspects, I continue to see problems without good solutions.  It is very much like the interest over quantum cryptography (which is not cryptography, but merely key exchange): it is an intriguing and elegant theory, which falls apart upon implementation.

I am increasingly agreeing with the opinion expressed on a T-shirt at a recent conference: "Blockchain is not the answer."

[rslade]

And, sorry, GDPR will not kill blockchain.  Blockchain is a technology.  GDPR is really just a checklist type of security framework.  (With huge fines for non-compliance, yes, but nothing more than that.)

[Instructor]

Nice and clear explanation !!!

[Beads]

I want that T-shirt!

[planois]

I really do not see why blockchain should be on the current CBK as it is still in its early stages and is far from being ready for prime time. Still too many issues to sort out, the GDPR being one of them. The technology needs to mature first.