NIST updates Risk Management Framework
The National Institute of Standards and Technology is updating its Risk Management Framework to help public- and private-sector organizations better protect critical infrastructure and individuals’ privacy.
The new version addresses how organizations can assess and manage risks to their data and systems by focusing on protecting individuals’ personally identifiable information. Information security and privacy programs share responsibility for managing risks from unauthorized system activities or behaviors, the draft states, making their goals complementary and coordination essential.
The draft update also ties the risk framework more closely to the Cybersecurity…
