U.S. Chamber advocates for CISA taking risk-based approach in bad practices guide

The U.S. Chamber of Commerce is asking the Cybersecurity and Infrastructure Security Agency to utilize a risk-based approach to discussing bad practices in its product security guide and sees an opportunity for the agency to incorporate nuance by raising potential exceptions to recommendations.

“Industry opinion on the guidance features a mix of praise and concern. A common through line is the guidance lacks practicality and subtlety, especially because of the wide applicability that CISA envisions for the guidance,” the Chamber...