NIST unveils second draft of cyber framework update

The National Institute of Standards and Technology today released the second draft of its proposed update to the landmark framework of cybersecurity standards, offering clarifications and revisions to language on cybersecurity measurements and security of the supply chain.

The “version 1.1” second draft comes after stakeholders raised concerns about the measurement and supply chain language following its release earlier this year.

“The new version of the framework clarifies and revises cybersecurity measurement language and aims to help users better...