
The National Institute of Standards and Technology (NIST) on Tuesday issued a draft update to the Framework for Improving Critical Infrastructure Cybersecurity, known as the Cybersecurity Framework.The draft provides details on managing cyber supply chain risks, clarifies key terms, and introduces cybersecurity measurement methods. NIST explained “the updated framework aims to further develop NIST’s voluntary guidance to organizations on reducing cybersecurity risks.”The original Cybersecurity Framework was first published in February 2014 as directed by a February 2013 presidential executive order…