Topics:

NIST drafts cybersecurity guidance

Email LinkedIn
Tools

The National Institute of Standards and Technology (NIST) is working on a plan for government agencies to adopt a comprehensive approach to cybersecurity. NIST is planning to issue its cybersecurity guidance early next year. It will require agencies to carry out risk management evaluations for the entire life of an IT contract. "This is part of a larger strategy to try to do more on the front end of security as opposed to just on the back end," NIST's Ron Ross, who is in charge of FISMA guidance at the agency, tells InformationWeek.com. "We don't think of security as a separate undertaking, but as a consideration we make in our normal lifecycle processes."

For more on NIST's cybersecurity plans:
- see this InformationWeek.com article