Regulations, Frameworks, and Controls - April 1, 2022

NIST is Seeking Public Advice to Help Cybersecurity for the Supply Chain

NIST issued a Request for Information (RFI) “seeking information to assist in evaluating and improving its cybersecurity resources, including the “Framework for Improving Critical Infrastructure Cybersecurity” (the “NIST Cybersecurity Framework,” “CSF” or “Framework”) and a variety of existing and potential standards, guidelines, and other information, including those relating to improving cybersecurity in supply chains. NIST is considering updating the NIST Cybersecurity Framework to account for the changing landscape of cybersecurity risks, technologies, and resources.” By The National Law Review I March 25, 2022

Read More

Why metrics are crucial to proving cybersecurity programs’ value

As solutions to managing cybersecurity threats increase, surprisingly few metrics are available on how well these methods work to secure organizational assets. The National Institute of Standards and Technology (NIST) has pioneered information security performance measurement models that can produce metrics. By Cynthia Brumfield I March 30, 2022 Read More