British standards group backs metrics as it moves on certification under NIST framework

The British Standards Institution is supporting the use of metrics for measuring the effectiveness of a voluntary framework of cybersecurity standards as part of a proposed update by the National Institute of Standards and Technology.

BSI Group's support for metrics as nothing new in the context of standards is in stark contrast to other business groups that are urging NIST to convene an extensive round of talks with industry on the issue.

“Metrics have been a staple in the...