---
title: Regulations, Frameworks, and Controls - May 21, 2021
description: Check out the latest news on Cybersecurity and Risk Management
image: https://blog.omnistruct.com/hubfs/Newsletter/May%2014%20Newsletter%20(Top%20Story).png
---

<https://omnistruct.com/>![Omnistruct Logo1200px](https://blog.omnistruct.com/hs-fs/hubfs/Omnistruct%20Logo1200px.png?width=300&height=64&name=Omnistruct%20Logo1200px.png)<https://omnistruct.com/>

- [Omnistruct Home](https://omnistruct.com/)

- [Omnistruct Home](https://omnistruct.com/)

Search for:

[Home](https://omnistruct.com) / Regulations, Frameworks, and Controls - May 21, 2021

# Regulations, Frameworks, and Controls - May 21, 2021

Posted by [Omnistruct Marketing](https://blog.omnistruct.com/author/omnistruct-marketing) on May 23, 2021 1:31:25 PM

- [Tweet](https://twitter.com/share)

[![May 14 Newsletter (Top Story)](https://blog.omnistruct.com/hs-fs/hubfs/Newsletter/May%2014%20Newsletter%20(Top%20Story).png?width=752&name=May%2014%20Newsletter%20(Top%20Story).png)](https://itpronet.org/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=127065398&_hsenc=p2ANqtz-84R1_wqFf4zj1Qgd9E03dJBtPaoq8KdVzz3UsImAfygO7Dn5zcM_Y5kQFnDSBmTw3hy8qLsjE7vE0IpRDsFrMWa7L_NA)

---

## <https://www.newswire.ca/news-releases/stelco-announces-cybersecurity-attack-896349927.html><http://jdsupra.com/legalnews/nist-publishes-key-practices-in-cyber-8958424/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=120518966&_hsenc=p2ANqtz-_flIHURI2IO_xy7rM4FAYUhjiLxR7uTG_2LKaqJeXzFAezdmWu5-T04LT3Q21TQhUoYjpdBof0PkLaPIpr0uEjtb5BFg><https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064215nxG7V3Zsc37CgF_rW1BkFSq2dV_hwW8tg_qQ3q_QkYW81B6T54QTkscW813MHz1mDK82W4mPWy37mhFbkW3jC_nG49gjhfW8VYsrB2GjftmW96WCzp2Sc8fGW44-Yyz3QDVHVW1Fyz9f6dSHgGN1BL014p-ShhN3m9b2QbMkFnW5ngq9F6s3qr8W1xs-8L2NVwz3W6VK09x6MZyp7W6N1Zbb7xzG4-W3R3Q8y5fbkK4W5S7WxN6zb-BWW1dzpvt8tG4kFW214Z7p11NY3JN8gHnxS9lX4xVQTRJ06l0tnmW2v5bQ2574ZpnW50GQ1C8RklP8VRbk8T1QvDnTVpGS5G63klTHW8ZpNQq2lsYsKW8S547Q7w7T0YW20J2K-7vl-nFW1FZM2b68K8VbW6NH4Hf1XKR9dW8kGX774YDnww39kd1><https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glj213p_b1V1-WJV7CgY2sW6nnfjY53-cMlW5-KBwJ4PHw9kW88JFbT7gycMBVYbCQ85R0kD-W1j5XJZ93h6d2W98bkSl6SD7J3W5sl3xb3YWvtnW7H2lgs48NmRKW47rWN41D3fYSW8RkKc078DM-7W5RhzZf2wHYX_W39P1Pr8rWcQpW7kTFZd1KclKlVm_HT55vP1chW1H3V0g3PT7PxW3Xd6RZ5Xb6_6W7sRpzQ3XKPDtW7HKpwc7Jv3R4W8BV3fn3Nv19HN8NFkWn77gRDN1C3Bd2KhznBW1yzcrs7sV5KCW7NFYFR1XqP29Vh9mM82qxggwVxtfRv7q9kTtN2Z1zyNJYmZSW4Zbh4d3kX8yfW6C61Tx2ZY9s9W7ygxT194_GwbW3P5Yty4KTc6l34nP1><https://www.bankinfosecurity.com/tips-on-enhancing-supply-chain-security-a-16479?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=124435208&_hsenc=p2ANqtz-_Z5jAW99IuHWULk3x81cN8k1Ut7Vqd3c73b9OOk15amJUypJwYIp4W3hcdfylDL1EPp9sTrRl2y9cunxCw7ztnXpaccw><https://gcn.com/articles/2021/05/03/nist-post-quantum-encryption.aspx?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=125808358&_hsenc=p2ANqtz-8HHFgnQ0WD7gODizpPNP87wLzUHsbyZpmxoEzZUEYGbnacZKjdSSGyBftAUOe-4Ef0JpmiaOf3OzoRgBCJYBOkC1PHKQ><https://www.forbes.com/sites/forbestechcouncil/2021/05/10/hacking-h2o-a-plea-to-mandate-the-nist-csf-to-secure-critical-infrastructure/?sh=514deb234698&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=127065398&_hsenc=p2ANqtz-84R1_wqFf4zj1Qgd9E03dJBtPaoq8KdVzz3UsImAfygO7Dn5zcM_Y5kQFnDSBmTw3hy8qLsjE7vE0IpRDsFrMWa7L_NA>[Using FAIR and NIST CSF for Security Risk Management](https://securityintelligence.com/posts/using-fair-and-nist-csf-security-risk-management/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=128650953&_hsenc=p2ANqtz-97kaIg2u7tPnMhZHeTyU3YfVQlIeNVrvJsO167qVUpsPUhtUbeoKgT4ZMXdzknA2RO8-x2zpNAt_XSJh5ou7k51fBiTQ)<https://www.forbes.com/sites/forbestechcouncil/2021/05/10/hacking-h2o-a-plea-to-mandate-the-nist-csf-to-secure-critical-infrastructure/?sh=514deb234698&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=127065398&_hsenc=p2ANqtz-84R1_wqFf4zj1Qgd9E03dJBtPaoq8KdVzz3UsImAfygO7Dn5zcM_Y5kQFnDSBmTw3hy8qLsjE7vE0IpRDsFrMWa7L_NA><https://www.newswire.ca/news-releases/stelco-announces-cybersecurity-attack-896349927.html>

Risk management and risk assessments go hand in hand, and most organizations have completed a security assessment based on maturity models at some point in their existence. However, more companies are realizing the need to complement maturity models with a risk-based approach for assessing their cybersecurity positions. By Shelley Bland I May 18, 2021

 

## <https://www.jdsupra.com/legalnews/nist-sp-800-172-enhanced-guidelines-7796670/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo><https://defensesystems.com/articles/2021/02/10/nist-cui.aspx?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo><https://www.jdsupra.com/legalnews/nist-guidance-on-internet-of-things-iot-2825269/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8JY2k8rYji8ybkKsRGLX3QruVH833SZb2sPEHg8QoplUyUIeSBucWWbZlr0oNi2swQqB_i><https://www.miragenews.com/nist-shares-key-practices-in-cyber-supply-chain-517766/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z><https://gcn.com/articles/2021/03/02/stateramp-readies.aspx?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_eY1LDx_q-AjGF-79fGR1AjReQeMsSS_PxX3YwaTnxV-0c6-elwo7TooEuqYQ-VCL_fdkN><https://thehackernews.com/2021/04/nist-and-hipaa-is-there-password.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=120518966&_hsenc=p2ANqtz-_flIHURI2IO_xy7rM4FAYUhjiLxR7uTG_2LKaqJeXzFAezdmWu5-T04LT3Q21TQhUoYjpdBof0PkLaPIpr0uEjtb5BFg><https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064453p_b1V1-WJV7Cgz_DW5hrhlQ2RGcL_W27RjWM8R5Tn_W2cGl067nfBwpW2j919K2S0pbZW2708Dj6FS35XW55JYFw93tPbtW5D88sh2r107cMP0LpX-0MVfW713_Sf3jL4-GW5nfcWK6XS2qHW1CxVzK1mzzqTW6b555m3_jpGqVs_hr29dbL3wW1RrLW349CNk5W8nbqTH146vFtW5f9Fs-29Qz3sW3GC0kL38KNllW5z_dyG1CBfjPN6CzhXxW3mYSW4pz8YC8_7fpfVxqyrw5csP5mW7SZQ5n7GrY-MW79WVM91c67X6W3Wjgqk2wC79QVXQDkb91jkWCW453TPT1D4FfmW3C71xG3_0h0rW2vF0fg5T4yxJV8fqBp8YSXCLW49BrF72nRj4n36xh1><https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glj213p_b1V1-WJV7CgRdPVtxfzB9llz1qW5y1dZR5Bx1rHW42-N4R4JHQBKV2Gzzd7G1RHQW4yRJsB2pJH3vW7PN4dj3Q_JfvW38jT2Z98SkVzW7c268n1xF63DW26LBDY3GXXL6W33C9z_8hR9F-VSNn_t49DMkFW2M03zL39y2nsW5vTJmY1s2PdQW5_Jf5H3kCK_vW1Y42BM3dqJsyW8Qp-FH4vLH4dW4DwBN51L2T1-W5WwPFw8cxk3hW3rN52278HlvwVPX7LB2-MjnkW4k1ty28VGc4QN7bmyvwtwRljVT4xXq7N7tJlW8PXPRP5y2r7TVTz05D7GCvrgW3k9b_P7BqtCzW5vD56Y82zmFNW6mLV4t1TTkf2W2Xgb1_2sDPTXVXrZj63XzmrD3pNn1><https://www.jdsupra.com/legalnews/nist-publishes-guidelines-aimed-at-6851693/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=124435208&_hsenc=p2ANqtz-_Z5jAW99IuHWULk3x81cN8k1Ut7Vqd3c73b9OOk15amJUypJwYIp4W3hcdfylDL1EPp9sTrRl2y9cunxCw7ztnXpaccw><https://securityboulevard.com/2021/05/choosing-a-cyber-security-framework/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=125808358&_hsenc=p2ANqtz-8HHFgnQ0WD7gODizpPNP87wLzUHsbyZpmxoEzZUEYGbnacZKjdSSGyBftAUOe-4Ef0JpmiaOf3OzoRgBCJYBOkC1PHKQ><https://www.cpomagazine.com/cyber-security/nist-and-cisa-release-guidelines-for-organizations-and-vendors-to-defend-against-software-supply-chain-attacks/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=127065398&_hsenc=p2ANqtz-84R1_wqFf4zj1Qgd9E03dJBtPaoq8KdVzz3UsImAfygO7Dn5zcM_Y5kQFnDSBmTw3hy8qLsjE7vE0IpRDsFrMWa7L_NA>[Critical Infrastructure Attacks: Threat Landscape Forces Security to Evolve](https://healthitsecurity.com/news/critical-infrastructure-attacks-threat-landscape-forces-security-to-evolve?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=128650953&_hsenc=p2ANqtz-97kaIg2u7tPnMhZHeTyU3YfVQlIeNVrvJsO167qVUpsPUhtUbeoKgT4ZMXdzknA2RO8-x2zpNAt_XSJh5ou7k51fBiTQ)<https://www.cpomagazine.com/cyber-security/nist-and-cisa-release-guidelines-for-organizations-and-vendors-to-defend-against-software-supply-chain-attacks/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=127065398&_hsenc=p2ANqtz-84R1_wqFf4zj1Qgd9E03dJBtPaoq8KdVzz3UsImAfygO7Dn5zcM_Y5kQFnDSBmTw3hy8qLsjE7vE0IpRDsFrMWa7L_NA><https://www.newswire.ca/news-releases/stelco-announces-cybersecurity-attack-896349927.html>

Ongoing and recent outages at critical infrastructure entities highlight the sophistication and evolution of the threat landscape, driving the need for improved security posture in healthcare. By Jessica Davis I May 17, 2021

 

## <https://securityintelligence.com/posts/using-fair-and-nist-csf-security-risk-management/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=128650953&_hsenc=p2ANqtz-97kaIg2u7tPnMhZHeTyU3YfVQlIeNVrvJsO167qVUpsPUhtUbeoKgT4ZMXdzknA2RO8-x2zpNAt_XSJh5ou7k51fBiTQ>[NIST's role under the recent US cyber EO. An NTSB for cyber incidents? Post-Colonial legislation.](https://thecyberwire.com/newsletters/policy-briefing/3/95?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=128650953&_hsenc=p2ANqtz-97kaIg2u7tPnMhZHeTyU3YfVQlIeNVrvJsO167qVUpsPUhtUbeoKgT4ZMXdzknA2RO8-x2zpNAt_XSJh5ou7k51fBiTQ)<https://securityintelligence.com/posts/using-fair-and-nist-csf-security-risk-management/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=128650953&_hsenc=p2ANqtz-97kaIg2u7tPnMhZHeTyU3YfVQlIeNVrvJsO167qVUpsPUhtUbeoKgT4ZMXdzknA2RO8-x2zpNAt_XSJh5ou7k51fBiTQ><https://www.newswire.ca/news-releases/stelco-announces-cybersecurity-attack-896349927.html>

The National Institute of Standards and Technology (NIST) recaps its new duties under Executive Order (E0) 14028, “Improving the Nation’s Cybersecurity.” NIST will craft standards and tools in consultation with stakeholders to strengthen software supply chain security from development and vendor vetting to implementation and testing, with an accelerated timeline for guidelines surrounding “critical software.” The agency is tasked with defining “critical software” with reference to features like network access, system interdependence, the criticality of function, and consequences if compromised. As we’ve seen, the resulting standards will guide Federal software procurement. By the CyberWire staff I May 19, 2021

 

 

---

[![Get a Free Consultation Now!](https://no-cache.hubspot.com/cta/default/5223782/7a13ece4-0f5b-4385-b275-f4c9cf174a2f.png)](https://cta-redirect.hubspot.com/cta/redirect/5223782/7a13ece4-0f5b-4385-b275-f4c9cf174a2f)

[![Download Our Latest Infographic Now](https://no-cache.hubspot.com/cta/default/5223782/9ce7317e-92ca-4388-af20-8fa53e1d5fec.png)](https://cta-redirect.hubspot.com/cta/redirect/5223782/9ce7317e-92ca-4388-af20-8fa53e1d5fec)

| Sincerely, **Omnistruct Marketing** 866-683-8827 [www.omnistruct.com](https://omnistruct.com/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX) --- Omnistruct, 2740 Fulton Avenue #101-02, Sacramento, CA 95821, USA, (866) 683-8827 [Unsubscribe                  ](https://email.omnistruct.com/business-information-security-news-october-9-2020#)[Manage preferences](https://email.omnistruct.com/business-information-security-news-october-9-2020#) |
| --- |

 Topics: [Omnistruct Newsletter](https://blog.omnistruct.com/tag/omnistruct-newsletter)

### Recent Posts

- [Cyber Security Programs](https://omnistruct.com/)
- [Why NIST CSF?](https://omnistruct.com/why-nist-csf/)
- [Pricing By Outcome](https://omnistruct.com/by-outcome/)
- [Pricing By Service](https://omnistruct.com/by-service/)
- [About](https://omnistruct.com/company/)
- [Contact](https://omnistruct.com/contact/)
- [Blog](https://omnistruct.com/blog/)
- [Partners](https://omnistruct.com/partners/)
- [News](https://omnistruct.com/news/)

![Omnistruct](https://blog.omnistruct.com/hubfs/Omnistruct_July2019%20/Images/Omnistruct1%20(1).png)

#### Get Social

<https://twitter.com/Omnistruct> <https://www.linkedin.com/company/omnistruct/>

Omnistruct Inc® - Copyright 2019 - Terms of Use - Privacy Policy