A recent GAO audit report pointed out something that should come as no surprise: federal agencies face several challenges when it comes to cybersecurity. The challenges GAO cited include: Threats from ...

In this post in our series on basic cybersecurity concepts for lawyers (see here and here for prior posts), we delve into the National Institute of Standards and Technology (NIST) Cybersecurity ...

The National Institute of Standards and Technology (NIST) has been a leading voice in cybersecurity standards since 2013, when President Obama’s Executive Order on Improving Critical Infrastructure ...

Add Yahoo as a preferred source to see more of our stories on Google. The front entrance sign at the Gaithersburg, Md., National Institute of Standards and Technology campus. (R. Eskalis/NIST.

The NIST Cybersecurity Framework 2.0 is designed to be universally applicable, extending its reach beyond critical infrastructure sectors to encompass all industries. This inclusive approach is a ...

Healthcare providers are tasked with safeguarding patients’ information, and that responsibility is guided by requirements and suggestions from several sources. The Office of the National Coordinator ...

COMMENTARY In the modern enterprise, where IT infrastructure, applications, and data are spread across multiple clouds, hybrid clouds, and on-premises data centers, identity ensures that the right ...

The National Institute of Standards and Technology’s (NIST) Cyber Security Framework (CSF) recently celebrated its fifth birthday. By the end of next year, Gartner estimates that 50 percent of ...

The Health Information Trust Alliance unveiled additions to the ninth version of its common security framework. The HITRUST CSF is a comprehensive security framework that incorporates information ...

The US National Institute of Standards and Technology (NIST) has updated its Privacy Framework to better align with its Cybersecurity Framework as the two become ...

Federal cybersecurity agencies are pressing Americans to act on a short list of protective steps that cost nothing but could blunt the impact of the next major cyberattack. The push comes as CISA, the ...