Draft NIST Cybersecurity Framework Implementation Guide for Federal Agencies

The National Institute of Standards and Technology (NIST) issued for public comment a draft version of a cybersecurity framework implementation guide for federal agencies, in support of President Trump’s new cybersecurity executive order that requires federal agencies adopt the NIST framework.

The report illustrates eight use cases in which federal agencies can leverage the Cybersecurity Framework to address common cybersecurity-related responsibilities.
The eight use cases are:
  1. Integrate Enterprise and Cybersecurity Risk Management 
  2. Manage Cybersecurity Requirements
  3. Integrate and Align Cybersecurity and Acquisition Processes 
  4. Evaluate Organizational Cybersecurity
  5. Manage the Cybersecurity Program
  6. Maintain a Comprehensive Understanding of Cybersecurity Risk 
  7. Report Cybersecurity Risks
  8. Inform the Tailoring Process 
Comments are due by June 30, 2017.

Draft NISTIR 8170 The Cybersecurity Framework

 

Comments are closed.