NIST to issue second draft framework update, seeking more comment on metrics

The National Institute of Standards and Technology will release for public comment this fall a second draft of “version 1.1” of the federal framework of cybersecurity standards, responding to industry concerns about measuring effective use of the standards and supply-chain risk management.

The announcement of a second draft came with the release of a summary of NIST’s May 2017 workshop on the cyber framework, noting that the second draft will be issued this fall with a 30-day public comment...