NIST embarks on plans to revise, create resources for risk management framework

The National Institute of Standards and Technology is updating and expanding the portfolio of publications associated with the NIST risk management framework, including updates to a federal security standard and cross-framework publications to increase ease of use, according to program leader Victoria Pillitteri.

NIST in fiscal 2025 hopes to “either issue initial public drafts or final updates” of a range of publications related to the RMF, “from our Federal Information Processing Standard to an interagency report on security control automation...