Bank Policy Institute urges focus on supply-chain issues in NIST’s ‘CSF 2.0’ update initiative

The Bank Policy Institute, a financial sector leader on cyber, says the NIST cybersecurity framework should not be weighed down with undue complexity as the agency considers a “CSF 2.0” update, but can evolve and be adapted to emerging threats such as supply chain and third-party risks.

“A cybersecurity framework, as intended by NIST, is meant to be incrementally modified and updated as its ability to successful identify and respond to risk changes. Therefore, we support NIST’s willingness to evaluate...