The NIST framework abroad: Uruguay maps to health and financial sectors, requires audits

BALTIMORE, MD. The government of Uruguay, which adopted the NIST framework of cybersecurity standards as the basis of its approach to cyber in 2016, is preparing its fifth update to the program based on NIST’s 2018 update and with a new financial-sector profile.

Uruguayan official Fabiana Santellan discussed her government’s efforts Thursday at the National Institute of Standards and Technology’s “Cybersecurity Risk Management Conference” here.

Uruguay requires its federal agencies to use the framework, and it is also “mandatory...