Cybersecurity Coalition raises concern over NIST’s informative references plan for CSF 2.0 update

NIST’s effort to move its cybersecurity framework informative references online is a cause for concern, according to the Cybersecurity Coalition, which argues that there should be multiple options in the CSF 2.0 update.

“The NIST Cybersecurity and Privacy Tool (CPRT) and the Online Informative References Program (OLIR) Catalog are complex programs that may be a barrier to understanding for some CSF users. We recommend NIST explore ways to provide online tools for informative references that meet the needs and capabilities...