Wednesday, March 6, 2013

NIST Critical Infrastructure Cybersecurity Framework RFI and Workshop Details

We're about a month away from the first NIST workshop to help create the new framework described in the recent Executive Order, as well as from the 5 pm, USA ET, April 8 deadline to submit responses to the RFI.

To refresh, here's what they/we are trying to do:
The goals of the Framework development process will be: (i) To identify existing cybersecurity standards, guidelines, frameworks, and best practices that are applicable to increase the security of critical infrastructure sectors and other interested entities; (ii) to specify high-priority gaps for which new or revised standards are needed; and (iii) to collaboratively develop action plans by which these gaps can be addressed. It is contemplated that the development process will have requisite stages to allow for continuing engagement with the owners and operators of critical infrastructure, and other industry, academic, and government stakeholders.
If you are so moved and have something to say (and NIST and I hope you do), here's how to submit your ideas and recommendations:

Old School
For those who prefer to communicate longhand by dipping your peacock feather quill into the inkwell on your vintage desk, "Written comments may be submitted by mail to Diane Honeycutt, National Institute of Standards and Technology, 100 Bureau Drive, Stop 8930, Gaithersburg, MD 20899."

New School
"Electronic submissions may be in any of the following formats: HTML, ASCII, Word, RTF, or PDF. Online submissions in electronic form may be sent to cyberframework@nist.gov."

Do this in Either Case
"Please submit comments only and include your name, company name (if any), and cite“Developing a Framework to Improve Critical Infrastructure Cybersecurity” in all correspondence."

'Know this in Either Case: Your Written Comments will be Public
"All comments received by the deadline will be posted at http://csrc.nist.gov without change or redaction, so commenters should not include information they do not wish to be posted (e.g., personal or confidential business information)."

In Person
Sometimes there's no substitute for being there in person, so if that's your desire, you can click HERE to register for the April 3 workshop in beautiful Gaithersburg. Hope you can make it and fair warning if you do: I'll be there too!

8 comments:

Unknown said...

Best Security Agencies in Delhi/NCR | Best Security Guards Services in Delhi/NCR
View Top security services-You can easily find some of the best security agencies in Delhi/NCR and Best security guards services in Delhi/NCR. One of the best personal and private security services Provider in India.
http://www.morpheussecurity.com/about-us.php

Unknown said...

You can easily find some of the Best security guards services in Delhi/NCR. Here you can get Indian security guards, High quality security guard and security guard services on Morpheussecurity .com

Unknown said...

Morpheus security services offers security services in delhi, best security agencies in Delhi/NCR. Security we provide a comprehensive spectrum of manned security services and security Guard Solutions.

Unknown said...

Security Services in Uttarakhand | Top Security Services in Uttarakhand
Morpheus security services offer security services in Uttarakhand, top security services in Uttarakhand, best security services in Uttarakhand. Security we offer a complete range of man security services and security Guard Solutions.

Unknown said...

Security Services in Uttarakhand | Top Security Services in Uttarakhand | Best Security Services in Uttarakhand
Morpheus security services offers security services in Uttarakhand, top security services in Uttarakhand, best security services in Uttarakhand. Security we provide a comprehensive spectrum of manned security services and security Guard Solutions.

Unknown said...

Security Services in Chhattisgarh
Morpheus security services offers security services in chhattisgarh, security services in madhya pradesh, security services chhattisgarh. Security we provide a comprehensive spectrum of manned security services and security Guard Solutions.

Anonymous said...

EPG Security Group provides security services and protection to executives, high-profile individuals, and organizations from businesses to places of worship to the hospitality industry.
Security company MN

NIST critical infrastructure said...

Thanks for sharing information on NIST critical infrastructure. NIST Cybersecurity Framework provides a policy framework of computer security guidance