1. Home
  2. |Insights
  3. |NIST Updates Cybersecurity Framework (CSF)

NIST Updates Cybersecurity Framework (CSF)

Client Alert | 1 min read | 01.18.17

Last week, the National Institute of Standards and Technology (NIST) issued a draft update to the Framework for Improving Critical Infrastructure, also known as the “Cybersecurity Framework” or CSF. This Version 1.1 update includes (i) a new section addressing measurement and demonstration of cybersecurity; (ii) considerations regarding Cyber Supply Chain Risk Management (SCRM) added throughout the CSF; and (iii) clarification of existing key terms and concepts.

The proposed additions regarding cybersecurity measurement are intended to “get the conversation started” and help companies map their business outcomes to their cyber risk management practices. The update aims to enable organizations to produce meaningful cyber risk information to use in enterprise-level risk management decisions, which can also be conveyed to dependents, partners and customers as applicable. Supply chain-focused updates are intended to bolster existing sections of the CSF as well as develop a common vocabulary for cyber supply chain risk management across industries and project types.

Version 1.1 of the CSF is intended to be “fully compatible” with the existing Version 1.0. Comments on Version 1.1 must be submitted by April 10, 2017, and NIST intends to publish a final Framework Version 1.1 in the fall of 2017.

Contacts

Insights

Client Alert | 3 min read | 02.27.26

EEOC v. Coca-Cola Beverages Northeast, Inc.: Another Step Focused on the EEOC’s Goal of Eradicating Unlawful DEI-Related Practices

On February 17, 2026, the U.S. Equal Employment Opportunity Commission (EEOC) filed a complaint against Coca-Cola Beverages Northeast, Inc., in the United States District Court for the District of New Hampshire, alleging that the company violated Title VII of the Civil Rights Act of 1964 (Title VII) by conducting an event limited to female employees. The EEOC’s lawsuit is one of several recent actions from the EEOC in furtherance of its efforts to end what it refers to as “unlawful DEI-motivated race and sex discrimination.” See EEOC and Justice Department Warn Against Unlawful DEI-Related Discrimination | U.S. Equal Employment Opportunity Commission....

View All Insights