NIST Expands Cyber Framework to Sectors Beyond Infrastructure

A long-awaited update to the National Institute of Standards and Technology’s Cybersecurity Framework expands the guidance’s scope to address a broader swath of cyber professionals working in sectors beyond critical infrastructure.

The new version, released Monday, features expanded standards for improving organizational cyber posture and a new focus on best practices for internally governing security risks.

The update to NIST’s voluntary framework, an especially popular compliance resource within the private sector last updated in 2018, is part of a broader federal push to bolster cybersecurity practices and regulations. It comes two years after the agency asked the public for ...