NIST struggles with use of 'metrics' in talks on updating cyber framework

Gaithersburg, MD – Officials at the National Institute of Standards and Technology heard strong criticism Tuesday of the agency's proposal for the use of “metrics” to measure the effectiveness of the framework of cybersecurity standards -- with industry officials arguing it was premature and ill-conceived to call for such measures, which could deflect resources from ongoing efforts to promote broader use of the framework.

NIST officials responded by suggesting the plan on measurements could be revised to promote the value...