NIST Is Updating Its Cybersecurity Framework

NIST is planning a significant update of its Cybersecurity Framework. At this point, it’s asking for feedback and comments to its concept paper.

1. Do the proposed changes reflect the current cybersecurity landscape (standards, risks, and technologies)?
   
2. Are the proposed changes sufficient and appropriate? Are there other elements that should be considered under each area?
   
3. Do the proposed changes support different use cases in various sectors, types, and sizes of organizations (and with varied capabilities, resources, and technologies)?
   
4. Are there additional …

area asking capabilities cases comments concept current cybersecurity feedback framework national security policy nist organizations planning point risks standards support technologies types under update use cases