NIST’s Lefkovitz: Assessment criteria, mapping standard needed for use of privacy framework

A key National Institute of Standards and Technology official is pointing to a need for criteria to assess entities’ conformity to specific, standard requirements when using the agency’s emerging privacy risk management framework.

“Again, it is a framework, not a standard, per se,” Naomi Lefkovitz, NIST’s senior privacy policy advisor and leader of the framework’s development, explained in a webinar the agency held Tuesday to answer questions on a preliminary draft of the document.

NIST is developing its privacy risk...