Framework Roadmap Overview - July 2018
The Framework Roadmap draft highlights key areas of development relevant to the Framework, including Confidence Mechanisms, Cyber Attack Lifecycle, Cybersecurity Workforce, Cyber Supply Chain Risk Management, Federal Agency Cybersecurity Alignment, Governance and Enterprise Risk Management, Identity Management, International Aspects, Measuring Cybersecurity, and more. NIST collaborates with stakeholders to address challenges and evolve the roadmap based on technological advancements and cybersecurity landscape changes.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
E N D
Presentation Transcript
Introduction to the Framework Roadmap July 2018 cyberframework@nist.gov
The Framework Roadmap Draft Roadmap v1.1 (Dec 5, 2017) Confidence Mechanisms Cyber Attack Lifecycle Cybersecurity Workforce Cyber Supply Chain Risk Management Federal Agency Cybersecurity Alignment Governance and Enterprise Risk Management Identity Management International Aspects, Impacts, and Alignment Measuring Cybersecurity Privacy Engineering Referencing Techniques Small Business Awareness and Resources Highlights areas of development relevant to the Framework and of broader interest Describes anticipated future activities related to the Framework NIST collaborates with stakeholders to identify challenges, solicit input, and develop and execute action plans for addressing roadmap areas Continues to evolve based on advancements in technology and the evolving cybersecurity landscape 3
Roadmap Areas Confidence Mechanisms Can be used to enhance an organization s understanding of its implementation of a Framework profile Understanding the Tactics, Techniques and Procedures (TTP) an attacker may employ and the vulnerabilities an attacker may exploit are critical to effective cyber defense Cyber Attack Lifecycle Cybersecurity Workforce A skilled cybersecurity workforce is needed to meet the unique cybersecurity needs of critical infrastructure 4
Roadmap Areas Cyber Supply Chain Risk Management Organizations are dependent upon product and service supply chains. Supply chain risk should be included in organizational risk management programs. Federal Agency Cybersecurity Alignment NIST is updating SP 800-37 (RMF), to incorporate key Cybersecurity Framework, privacy risk management and systems security engineering concepts. Governance and Enterprise Risk Management Participants involved in developing the Framework stressed that leadership buy-in to the approach was crucial to improving the nation s cybersecurity. 5
Roadmap Areas Identity management needs to become more risk-aligned, adaptive, and contextual with guidance capable of supporting flexibility, modularity, and agility Identity Management International Aspects, Impacts, and Alignment Diverse requirements can impede interoperability, result in duplication, harm cybersecurity, and hamper innovation, hindering the ability of organizations to operate globally while effectively manage risks. More accurate and quantifiable projected cost and estimated risk reduction associated with cybersecurity investments requires an aligned, modular, and systemic approach to cybersecurity measurement. Measuring Cybersecurity 6
Roadmap Areas A key challenge has been determining how to design information technologies that protect individuals privacy and civil liberties in an increasingly connected world. Privacy Engineering To handle evolving cybersecurity standards, sector specific recommended practices, etc., the Informative References must adapt. Referencing Techniques Small Business Awareness and Resources It is important that small business leaders understand and have effective approaches to manage risks to their information, systems and networks. 7
Resources Where to Learn More and Stay Current Framework Roadmap and related efforts: https://www.nist.gov/cyberframework/related- efforts-roadmap Framework for Improving Critical Infrastructure Cybersecurity and related news, information: www.nist.gov/cyberframework Additional cybersecurity resources: http://csrc.nist.gov/ Questions, comments, ideas: cyberframework@nist.gov 8
