NIST revises flagship cyber resiliency guidance

guest · Aug 5, 2021

NIST revises flagship cyber resiliency guidance
August 5, 2021
https://www.fedscoop.com/nist-revises-cyber-resiliency-guidance/

The National Institute of Standards and Technology released the first-ever revision to its flagship cyber resiliency guidance with updated controls and a single threat taxonomy Thursday.

NIST updated Special Publication (SP) 800-160 Vol. 2 to align cyber resilience controls with SP 800-53 Rev. 5 security and privacy controls for agencies’ and industry’s IT systems, as well as map it to MITRE’s ATT&CK threat framework.
Click to expand...

The guidance provides a cyber resiliency engineering framework complete with a tailorable analysis agencies can use to determine whether a system of theirs, no matter how old, is at risk of being compromised by advanced persistent threats.
Technical appendices supplement that framework with:

background and contextual information on cyber resiliency;

detailed descriptions of goals, objectives, techniques, implementation approaches, and design principles;

mutually beneficial controls in corresponding the SP 800-53; and

language used to describe the effects of current threat mitigations.

Click to expand...

NIST: Developing Cyber-Resilient Systems: A Systems Security Engineering Approach

Cyber attacks are a reality. Sometimes even with the best protective measures in place, adversaries can breach perimeter defenses and find their way into systems.

Draft NIST Special Publication (SP) 800-160, Volume 2, Revision 1, Developing Cyber-Resilient Systems: A Systems Security Engineering Approach, turns the traditional perimeter defense strategy on its head and moves organizations toward a cyber resiliency strategy that facilitates defending systems from the inside out instead of from the outside in. This guidance helps organizations anticipate, withstand, recover from, and adapt to adverse conditions, stresses, or compromises on systems – including hostile and increasingly destructive cyber attacks from nation states, criminal gangs, and disgruntled individuals.
Click to expand...

guest · Aug 21, 2021

National Cyber Director Chris Inglis Focusing on Resiliency
August 20, 2021
https://www.databreachtoday.com/national-cyber-director-chris-inglis-focusing-on-resiliency-a-17343

John "Chris" Inglis says one of his first priorities as national cyber director within the White House is focusing on issues of cyber resiliency.

"The national cyber director is going to be accountable for present and future resilience," Inglis told the audience.
"That's a somewhat subtle term. But what we mean by that is that we have to take a hard look not just at the technology, but also as to whether people are prepared to play their role in cyberspace, and whether the roles and responsibilities are well defined. … How do we get ready for that future? And we need to make sure that we're making the
investments."
Click to expand...

The U.S. government in recent years has been struggling with the issue of building resilient systems that can withstand a cyber incident and continue to perform essential functions. Earlier this month, the U.S. National Institute of Standards and Technology released a draft of an updated publication that addresses how to build resilient systems (see: NIST Guidance Focuses on Creating 'Cyber Resiliency').

As one way to support building these types of resilient systems, Inglis pointed to the $1 billion IT modernization grant program for federal agencies, which will be overseen by the General Services Administration and the Office of Management and Budget.
Click to expand...

Log in or Sign up

NIST revises flagship cyber resiliency guidance

guest Guest

guest Guest

Log in or Sign up

NIST revises flagship cyber resiliency guidance

guest Guest

guest Guest

Useful Searches