NIST calls for full-time cyber operations by contractors to counter advanced threats

The National Institute of Standards and Technology has issued draft cybersecurity guidelines for government contractors that call for full-time security operation centers to counter advanced threats, among other recommendations for such sophisticated activities as threat-hunt capabilities and automated analytics.

The draft guidelines were issued as a supplement to proposed revisions for NIST Special Publication 800-171, in response to a request from the Defense Department for tougher contractor requirements in the face of increasingly sophisticated cyber threats, according to NIST. The...