A nice article on the plans to update the NIST CSF.

← Back to Blog

A nice article on the plans to update the NIST CSF. NIST CSF is an important standard, it is as a requirement under FISMA and the RMF and adopted by CISA in industry specific profiles. It’s a versatile standard that when adopted with the RMF supports cybersecurity risk mitigation and mission and business objectives.

The proposed updates to the CSF profile, to include Governance and supply chain risk should be welcome. As U.S and EU cyber regulations focus on board governance and cybersecurity risk management, oversight and assurance over third party suppliers, that include ICT and cloud providers. These additional CSF functions are included in the Financial Services CSF profile.

We teach the CSF profile in our cybersecurity risk management board governance program. To address cybersecurity risk management regulatory compliance, it forms the basis for risk mitigation, alongside the RMF. (https://lnkd.in/etQdtn-w)

Watch for our CSF paper and why its an important standard for cybersecurity risk management regulatory compliance.

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #csfprofile #cyberregulation #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7034806785517477888

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags