Cybersecurity Framework
Latest Updates
Stay tuned for a draft update to the Cybersecurity Framework. This "Version 1.1" is expected to be released for public review and comment early in 2017. The proposed update will clarify, refine, and enhance the Framework, making it even easier to use. The Framework is intended to remain flexible, voluntary, and cost-effective and be fully compatible with V1.0.
Cybersecurity professionals talk about what the Cybersecurity Framework means to their organizations. The Framework, which was created through collaboration between industry and government, consists of standards, guidelines, and practices to promote the protection of critical infrastructure. The prioritized, flexible, repeatable, and cost-effective approach of the Framework helps owners and operators of critical infrastructure to manage cybersecurity-related risk.
Above, you can also view a brief animated video, which features additional cybersecurity professionals talking about what the framework means to their organizations. These experts from Intel, Microsoft, Telos, the U.S. Chamber of Commerce and the National Restaurant Association worked with NIST, other agencies and industry and academia to develop the framework. Like the framework itself, the video is not only for those in the trenches of cybersecurity, but also those in the C-suite, who make funding and business decisions that affect cybersecurity.