The National Institute of Standards and Technology (NIST) released the final version of its new risk management framework (RMF)–NIST SP 800-37 Revision 2–addressing both security and privacy concerns in IT risk management. […]

Federal agencies are using the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework to manage their agencies’ cybersecurity risk, a year after the White House issued an executive order directing the heads of executive agencies and departments to use the NIST framework, according to an agency official. […]