Inside Cybersecurity, March 9, 2022

By Sara Friedman

A major trade group for the software industry sees NIST’s work to update the cybersecurity framework as an opportunity to incorporate supply chain guidance, but is cautioning against creating too much new documentation that could ultimately hinder adoption.

“We think it is a good thing that NIST is thinking about updating the framework because cybersecurity changes quickly and we need to have open and honest conversations about ways we can improve the framework. That being said, the framework is designed to be flexible and evergreen and so it is difficult to imagine NIST starting from a blank piece of paper,” BSA | The Software Alliance’s Henry Young told Inside Cybersecurity.

Young said BSA expects NIST to generate a “fruitful conversation to find ways to improve the framework,” but the update will not make the CSF “look completely different than it does now.”

Read More >>

Original Posting: https://insidecybersecurity.com/daily-news/software-group-wants-nist-cybersecurity-framework-update-be-%E2%80%98flexible%E2%80%99-maximum-adoption