The triangle taught me how to think about information security. The pentagon taught me how to think about organizational ...

The National Institute of Standards and Technology (NIST) is seeking feedback on their draft Cybersecurity Framework (CSF) 2.0. The release of this public draft is an important milestone for ...

AI "is going to be a part, if not a leading part, of every project going forward" at the National Cybersecurity Center of Excellence, according to its director.

The newest draft of the National Institute of Standards and Technologies' cybersecurity framework emphasizes integrating cybersecurity into companies' core governance functions and offers guidance on ...

The National Institute of Standards and Technology (NIST) has released an update to its Cybersecurity Framework — the first since the guidance document was issued in 2014. Cybersecurity Framework (CSF ...

Version 2.0 of NIST's Cybersecurity Framework, often cited by financial regulators, provides a structured approach to enhancing an institution's cybersecurity. The federal agency in charge of ...

The software Industry wants agencies to show their ‘use’ of the NIST Cybersecurity Framework, which it says should be mapped to the revised supply chain guidance. The National Institute of Standards ...

Despite some halting progress with cybersecurity readiness, healthcare is still lacking in many key areas, according to a new progress report from the consultancy CynergisTek. In particular, the study ...

NIST's recently released Cybersecurity Framework version 1.1 showcases the Institute’s expanding role and the reliance of lawmakers on its guidance. While this should be welcomed given NIST’s rigorous ...

The US National Institute of Standards and Technology (NIST) has released the final version of version 2.0 of its popular Cybersecurity Framework (CSF). The new framework is now available to be used ...

There are a lot of challenges to being a small-business owner, including safely managing technology. Every risk can have an outsized effect on your ability to stay in business. And resources for ...

It’s time the National Institute of Standards and Technology point to how organizations should be assessing the risk they’re associating with systems when deciding what security controls to implement ...