CSF 2.0: USTelecom says cyber framework holds up well, calls for mapping to global standards and supply chain guidance

USTelecom says the NIST cybersecurity framework is “a model for risk management” that doesn’t require significant changes, but can be updated to incorporate tools such as supply chain guidance and more detailed mapping to international standards as the agency crafts “CSF 2.0” in tandem with industry partners.

“The current CSF is effective and therefore changes should be minimal. If changes to the CSF are seen as unavoidable, however, then NIST should address backward compatibility issues, especially as related to other...