NIST pressed to address cyber vulnerability disclosures in update to framework

GAITHERSBURG, MD – Industry and government officials are calling for inclusion of provisions on coordinated disclosure of cyber vulnerabilities in the National Institute of Standards and Technology's framework of cybersecurity standards, while disagreement remains over how to integrate it into the framework.

During NIST’s cybersecurity framework workshop here Tuesday, several workshop participants pressed the agency to include cyber vulnerability disclosure in plans to update the framework, even integrating it into the framework’s core and implementation tiers.

One government participant said...