Framing a Picture

A new update to the U.S. National Institute of Standards and Technology (NIST) cybersecurity framework was announced in January.

According to Biometric Update, the original framework was due to a presidential executive order in February, 2014, and was intended to provide a voluntary set of standards, guidelines and best practices to avoid risks on major sectors of infrastructure in the United States.

The new draft will include: "a new section on cybersecurity measurement; greatly expanded explanation of using the framework to manage supply chain risk; refinements to better account for authentication, authorization, and identity proofing; along with a better explanation of the relationship between implementation tiers and profiles," says Biometric Update. To view the new draft framework, visit the NIST site at www.nist.gov, or the links below.

Sources:

http://www.biometricupdate.com/201701/nist-updates-cybersecurity-framework

https://www.nist.gov/sites/default/files/documents/2017/01/17/draft-cybersecurity-framework-v1.1.pdf