U.S. Chamber urges NIST to consider breadth of current framework profiles in CSF 2.0 update, avoid being prescriptive

The U.S. Chamber of Commerce sees benefits in updating the NIST cybersecurity framework, while raising concerns over creating profiles that could be too prescriptive and pushing back against the creation of a supply chain function.

“NIST indicates that it will produce an optional template for developing CSF Profiles. Many organizations may find a model Profile useful. NIST should continue emphasizing that there is a wide variety of Framework Profiles, not only among sectors but within sectors. NIST should also continue...