NIST releases ‘discussion draft’ for cyber framework update, with details on governance function and implementation examples

SAN FRANCISCO. The National Institute of Standards and Technology is providing a preview of upcoming changes to the cybersecurity framework in a “discussion draft” that offers specific information on categories to include in a new “Govern function” along with implementation examples under consideration for subcategories.

The “discussion draft” takes into account responses from a January concept paper that asked specific questions on proposed changes and a subsequent virtual workshop and in-person working sessions. NIST’s Kevin Stine and Amy Mahn...