Hot Off The Press: NIST Releases Version 1.1 Of Cybersecurity Framework

Last week, the National Institute of Standards and Technology released version 1.1 of the Framework for Improving Critical Infrastructure Cybersecurity—more commonly known as the Cybersecurity Framework.

The first version of Cybersecurity Framework was initially issued in February 2014 as voluntary guidance for critical infrastructure organizations to better manage and reduce cybersecurity risk. Although it was designed specifically for companies that are part of the U.S. critical infrastructure, many other organizations, both from the public and private sector, have since then relied on the Cybersecurity Framework. The Framework has been used for a variety of purposes, including to raise cybersecurity awareness and to communicate with stakeholders within their organization, and as a strategic planning tool to assess cybersecurity risks and current practices.