NIST releases final draft of updated risk management and privacy framework

The National Institute of Standards and Technology today released for comment the final draft of its risk management framework on security and privacy issues, which integrates feedback received on past drafts and places further emphasis on supply-chain risk management.

The final draft is open to public comments through Oct. 31, with NIST now targeting December for publication of the updated risk management framework.

NIST listed seven “major objectives” including integrating “security-related, supply chain risk management concepts” into the risk...