The Cybersecurity Framework at 10...and Beyond

When the National Institute of Standards and Technology (NIST) released the inaugural Cybersecurity Framework in February 2014, no one knew how it would be received. Would it become another entry on a long list of excellent–but unused–cybersecurity reference documents? Or would industry embrace it?

The answer came quickly: the “Framework for Improving Critical Infrastructure Cybersecurity” soon moved beyond critical infrastructure and the “NIST Cybersecurity Framework” or the “CSF” became the shorthand for cybersecurity planning. But even in those first few months, no one could have predicted that it would be translated into at least 13 languages and counting. As the Bulgarian version of the framework aptly says, “Киберсигурността може да бъде важен компонент с нарастващо значение за цялостното управление на риска за организацията.” (Cybersecurity can be an important and amplifying component of an organization’s overall risk management.)

Now, after extensive consultation with industry experts, academics, civil society leaders, and global partners, NIST is preparing to release Version 2.0 of the CSF, along with a suite of new supplementary resources—like online tools, implementation examples, and quick start guides to help organizations reduce their cybersecurity risks.. On February 26, join Under Secretary of Commerce for Standards and Technology and NIST Director Laurie E. Locascio to learn what’s next for the Framework, and reflect on how it changed the way we assess, implement, and even talk about cybersecurity.

During the session, attendees will also hear from the NIST leaders who drove both the original CSF and the forthcoming Version 2.0, Adam Sedgewick and Cherilyn Pascoe. Finally, industry leaders and experts will talk about the process and how they see the new CSF impacting their cybersecurity and that of the nation as a whole.

Видео The Cybersecurity Framework at 10...and Beyond канала The Aspen Institute