Cybersecurity Framework Updates Are Eyed Amid Shifting Threats

The National Institute of Standards and Technology plans to update its cybersecurity framework that private sector companies follow.

NIST is seeking public feedback on how the framework is used and how it can be improved in light of an evolving cyber threat landscape.

The framework provides guidance to companies on how to prevent and respond to threats. It details steps such as making an inventory of digital devices and systems, while protecting them with measures to limit access and monitor for vulnerabilities.

The agency is interested in how organizations manage security risks to their software supply chains and whether ...