DHS, the White House and a number of government agencies are also working to further develop incentives for adopting the framework, some of which were released in high concept form last summer. Most Washington experts, however, believe that unless Congress enacts cybersecurity legislation, which has stalled many times and is currently sidelined by the controversies surrounding the National Security Agency, no true effective incentives for adopting the framework can be established.
Even with the remaining rough edges and uncertainties over adoption, most workshop attendees expressed enthusiasm over the potential for the framework to shift the cybersecurity community into a more collaborative and effective cross-industry mindset. "It's exciting to see NIST come to the beginning of finding a common language that can make a real difference," Harry Wingo, DC veteran and an advisor on cybersecurity matters, said.
Sign up for CIO Asia eNewsletters.