NIST Should Continue Outreach on Cybersecurity Framework, ITI Says

The National Institute of Standards and Technology’s recent release of its summary of stakeholder feedback on NIST’s Cybersecurity Framework Version 1.0 shows general awareness and market acceptance of the framework, but that more needs to be done to promote the framework in the U.S. and internationally, said the Information Technology Industry Council (ITI). “Foreign governments, many at important junctures in their own cybersecurity policymaking, are carefully watching U.S. activities,” said Danielle Kriz, ITI global cybersecurity policy director, in a blog post Tuesday. “While we do not expect foreign governments to adopt the Framework, we hope all governments will work in a similarly inclusive and transparent manner and create globally workable policies that enable entities to better manage their cybersecurity risks.” Kriz encouraged NIST and the White House to augment their global outreach on the framework in 2015 in tandem with ITI’s efforts. The White House should continue to work on implementing President Barack Obama’s 2013 cybersecurity executive order, while the Department of Commerce “should reinvigorate its Internet Policy Task Force (IPTF) and ask what activities the IPTF and Commerce generally should undertake to improve cybersecurity,” Kriz said. ITI is developing recommendations on cybersecurity legislation for the 114th Congress to consider, Kriz said.