This post first appeared on Next Gov. Read the original article. An effort to update the framework for securing critical infrastructure from cyberattack is coming face to face with issues that have plagued the Commerce agency from the beginning.

This post first appeared on Government Executive. Read the original article. People want a simple answer. Is this action safe? But despite Anthony Fauci bouncing responsibility for COVID-19 risk assessment to individuals, your risk can’t be boiled down to one probability.

This post first appeared on Next Gov. Read the original article. But, in general, the industry wants NIST to avoid making any changes at all to the choose-your-own-adventure document that has guided risk management and U.S. cybersecurity policy for almost a decade. The trade association representing the nation’s largest internet service providers asked the National (more…)

This post first appeared on Next Gov. Read the original article. The commission is joining the fray in a budding turf fight at the Cybersecurity and Infrastructure Security Agency that also involves sector risk management agencies like the Department of Energy. The Federal Communications Commission is claiming a space for itself in cybersecurity policymaking that (more…)

This post first appeared on Risk Management Monitor. Read the original article. SAN FRANCISCO—At today’s RISKWORLD 2022 opening ceremony and awards luncheon, RIMS recognized top risk management and insurance professionals with the society’s annual awards. This year’s Risk Manager of the Year is Courtney Davis Curtis, assistant vice president of risk management and resilience planning (more…)

NIST has released Draft NISTIR 8286C, “Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight.” The public comment period closes March 11, 2022.