NIST is developing its CSF 2.0. The CSF is the recommeded cybersecurity framework for FISMA amongst other regulations.

← Back to Blog

NIST is developing its CSF 2.0. The CSF is the recommeded cybersecurity framework for FISMA amongst other regulations. FISMA is important as it is the cybersecurity and supply chain risk management regulation that is required by all Federal Agencies. The Act requires the adoption of NIST SP 800-37, the Risk Management Framework that lays out the approach for cybersecurity risk management, adopting the CSF profile as a controls framework to mitigate risk.

Those that are interested in the SEC cybersecurity risk management proposal should pay attention to FISMA. The SEC has to eat its own ‘dog food’ for cybersecurity risk management compliance, so it is well aware of the challenges organisations must endure for cyber compliance. The CSF profile is also used by CISA (DHS), that have created several industry cybersecurity profiles.

Ted Dziekanowski Bob Dix

#cybersecurity #csfprofile #cyberriskmanagement #securitiesandexchangecommission #dhs #cisa

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7022888106882170880