Ride the Lightning

NIST To Rework its Cybersecurity Guidelines

January 24, 2023

CyberWire reported on January 20 that NIST is going to rework its cybersecurity guidelines. On January 19, the US National Institute of Standards and Technology (NIST) announced plans to revise its Cybersecurity Framework (CSF), a voluntary guidance document initially published in 2014 and last updated in 2018.

NIST has described the CSF as a “living document that is refined and improved over time,” and the planned revisions will be based on feedback received during a recent workshop and a Request for Information released last year. Some of the updates could include protocols regarding increased international collaboration, clearer integration with other NIST frameworks, and expanded coverage supply chains.

The introduction to the concept paper states, “With this update, NIST is open to making more substantial changes than in the previous update. The ‘CSF 2.0’ version reflects the evolving cybersecurity landscape—but community needs will drive the extent and content of the changes.” Comments for the concept paper are due by March 3, and NIST will host a virtual workshop on February 15 to promote engagement with the update.

As we say regularly in our webinars, there’s no “set and forget it” and cybersecurity. Glad to see that some substantial changes will be made.

Sharon D. Nelson, Esq., President, Sensei Enterprises, Inc.
3975 University Drive, Suite 225, Fairfax, VA 22030
Email:   Phone: 703-359-0700
Digital Forensics/Cybersecurity/Information Technology
https://senseient.com
https://twitter.com/sharonnelsonesq
https://www.linkedin.com/in/sharondnelson
https://amazon.com/author/sharonnelson