NIST Updates Cybersecurity Framework (CSF)
Client Alert | 1 min read | 01.18.17
Last week, the National Institute of Standards and Technology (NIST) issued a draft update to the Framework for Improving Critical Infrastructure, also known as the “Cybersecurity Framework” or CSF. This Version 1.1 update includes (i) a new section addressing measurement and demonstration of cybersecurity; (ii) considerations regarding Cyber Supply Chain Risk Management (SCRM) added throughout the CSF; and (iii) clarification of existing key terms and concepts.
The proposed additions regarding cybersecurity measurement are intended to “get the conversation started” and help companies map their business outcomes to their cyber risk management practices. The update aims to enable organizations to produce meaningful cyber risk information to use in enterprise-level risk management decisions, which can also be conveyed to dependents, partners and customers as applicable. Supply chain-focused updates are intended to bolster existing sections of the CSF as well as develop a common vocabulary for cyber supply chain risk management across industries and project types.
Version 1.1 of the CSF is intended to be “fully compatible” with the existing Version 1.0. Comments on Version 1.1 must be submitted by April 10, 2017, and NIST intends to publish a final Framework Version 1.1 in the fall of 2017.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 11 min read | 12.15.25
New York LLC Transparency Act: Key Requirements and Deadlines
On January 1, 2026 (“Effective Date”), the New York LLC Transparency Act ("New York Act”) is scheduled to take effect, introducing new disclosure requirements for limited liability companies (“LLCs”) formed or registered to do business in New York State. The New York Act is expected to impose the type of broad beneficial ownership requirements the federal CTA and rules implementing it was designed to require, before the federal government’s decision to limit the scope of the CTA’s beneficial ownership reporting requirements to foreign companies and foreign beneficial owners.
Client Alert | 7 min read | 12.15.25
The New EU “Pharma Package:” EU Reaches Landmark Deal on Pharma Package
Client Alert | 5 min read | 12.12.25
Eleventh Circuit Hears Argument on False Claims Act Qui Tam Constitutionality
Client Alert | 8 min read | 12.11.25
Director Squires Revamps the Workings of the U.S. Patent Office
