NIST And DoD Issue Cybersecurity Guidance And Rules

The government promulgated two important cybersecurity documents this week that will be of interest to a wide range of companies that track developments to improve security of critical U.S. computer networks.

First, the National Institute of Standards and Technology ("NIST") issued a preliminary version of voluntary cybersecurity standards, known as the Cybersecurity Framework.¹ NIST was directed to develop the Cybersecurity Framework under the executive order entitled "Improving Critical Infrastructure Cybersecurity" issued by President Obama on February 12, 2013.² This preliminary Cybersecurity Framework will be subject to a 45-day public comment period. The publication of this preliminary Framework also starts a 90- day clock for agencies responsible for regulating the security of critical infrastructure to report to the President on whether current regulatory requirements are sufficient in light of cybersecurity risks, whether such agencies have