NIST Seeks Comments on Cybersecurity Framework

The National Institute of Standards and Technology (NIST), publishers of the Framework for Improving Critical Infrastructure Cybersecurity (the “Framework”) last February, have published a Request for Information in the Federal Register seeking comments on industry experience with the Framework to date.  Comments are solicited in three areas:  the current awareness of the existence and content of the Framework, industry experiences in using the Framework to evaluate and improve cybersecurity, and where future revisions of the Framework should be focused.  The list is not exclusive, and comments on other Framework related matters are welcome as well.  Comments are due by October 10, 2014 and may be submitted to   Comments will be made publicly available at http://www.nist.gov/cyberframework/cybersecurity-framework-rfi.cfm so no confidential information should be submitted.