NIST workshop highlights implementation benefits of cyber framework, while flagging areas for improvement

The first workshop in NIST’s planned update to the cybersecurity framework generated opportunities to evaluate how the threat landscape has changed since the “CSF 1.1” update in 2018, and areas for improvement to ensure the foundational NIST publication addresses stakeholder needs going forward.

Participants in the Wednesday “CSF 2.0” workshop agreed that the cyber framework has helped to generate a common taxonomy for government and the private sector, but they also flagged challenges that make it difficult for organizations to...