MAR 09, 2022 | US
Software Group Wants NIST Cybersecurity Framework Update To Be ‘Flexible’ for Maximum Adoption
Inside Cybersecurity, March 9, 2022
By Sara Friedman
A major trade group for the software industry sees NIST’s work to update the cybersecurity framework as an opportunity to incorporate supply chain guidance, but is cautioning against creating too much new documentation that could ultimately hinder adoption.
“We think it is a good thing that NIST is thinking about updating the framework because cybersecurity changes quickly and we need to have open and honest conversations about ways we can improve the framework. That being said, the framework is designed to be flexible and evergreen and so it is difficult to imagine NIST starting from a blank piece of paper,” BSA | The Software Alliance’s Henry Young told Inside Cybersecurity.
Young said BSA expects NIST to generate a “fruitful conversation to find ways to improve the framework,” but the update will not make the CSF “look completely different than it does now.”
BSA | The Software Alliance (www.bsa.org) is the leading advocate for the global software industry before governments and in the international marketplace. Its members are among the world’s most innovative companies, creating software solutions that help businesses of all sizes in every part of the economy to modernize and grow.
With headquarters in Washington, DC, and operations in more than 30 countries, BSA pioneers compliance programs that promote legal software use and advocates for public policies that foster technology innovation and drive growth in the digital economy.