Significant Changes Coming to NIST Cybersecurity Framework

Significant Changes Coming to NIST Cybersecurity Framework Version 1.1 Emphasizes Stronger Integration Tying Cybersecurity to Business Processes) • December 12, 2017     10 Minutes   

The latest ISMG Security Report focuses on significant changes found in the latest version of the U.S. government's Framework for Improving Critical Infrastructure Cybersecurity, commonly known as the NIST cybersecurity framework.

In the Security Report (click on player beneath image to listen), you'll hear from:

Matt Barrett, the cybersecurity lead at the Commerce Department's National Institute of Standards and Technology; Larry Clinton, president of the trade group Internet Security Alliance; and Venable law firm's Ari Schwartz, a former top cybersecurity adviser in the Obama White House.

Stakeholders can submit feedback on the latest version of the framework to This email address is being protected from spambots. You need JavaScript enabled to view it. by Jan. 19. Barrett says a final version of the latest iteration of the cybersecurity framework could be published by late June.

The ISMG Security Report appears on this and other ISMG websites on Tuesdays and Fridays. Check out our Dec. 5 and Dec. 8 editions, which respectively explore the Securities and Exchange Commission targeting a Canadian company for cheating investors by exploiting a so-called Initial Coin Offering crowdsourcing funding system and analyze medical device cybersecurity.

The next ISMG Security Report will be posted on Tuesday, Dec. 12.

Theme music for the ISMG Security Report is by Ithaca Audio under a Creative Commons license.