Many of these and other concerns will be subject to further debate and discussion as the framework continues to evolve before the February deadline and, quite likely, beyond that deadline. NIST plans to further refine the framework through the upcoming workshop in North Carolina and after receiving the public comments.
"There's no magic bullet here and making progress will require sustained engagement," Adam Sedgewick, the chief organizer of the framework at NIST said. "We have a lot of work to do until February with receiving and adjudicating comments, and I think our role will evolve a bit at that point. That will include thinking about the next version of the Framework, how to support future R&D and standards needs--including the areas for improvement in the framework--conformity assessment, and rolling out framework maintenance to the private sector."
Cynthia Brumfield, President of DCT Associates, is a veteran communications industry and technology analyst. She is currently leading a variety of research, analysis, consulting and publishing initiatives, with a particular focus on cybersecurity issues in the energy and telecom arenas.
Sign up for CIO Asia eNewsletters.