Revamped Cybersecurity Guidance Is Map for Regulators, Companies

Expanded US Commerce Department cybersecurity guidance released this week could yield a sweeping “Rosetta Stone” of digital security for regulators, as well as a compliance blueprint for a wide array of entities with a history of questionable network security practices.

The department’s National Institute of Standards and Technology added new sections on corporate governance responsibilities and supply chain risks to its cybersecurity framework on Feb. 26 , which were previously limited to guidance on protecting critical infrastructure. The latest framework contains a litany of cybersecurity best practices and implementation tools for a range of organizations including schools, small businesses, and ...