Software group wants NIST cybersecurity framework update to be ‘flexible’ for maximum adoption

A major trade group for the software industry sees NIST’s work to update the cybersecurity framework as an opportunity to incorporate supply chain guidance, but is cautioning against creating too much new documentation that could ultimately hinder adoption.

“We think it is a good thing that NIST is thinking about updating the framework because cybersecurity changes quickly and we need to have open and honest conversations about ways we can improve the framework. That being said, the framework is designed...