Upcoming BSI certification will weigh in on longstanding questions of measuring cyber framework effectiveness

The British Standards Institution has decided to move ahead with its certification program for use of the cybersecurity framework issued by the National Institute of Standards and Technology, a move that will likely produce fodder for a longstanding debate over how to measure the effectiveness of the NIST framework which is seen as the most widely used process by government and industry for managing cyber risks.

BSI Group's yet-to-be-announced decision on certification is based on the results of a pilot...