New Member Promotion Ends 9/30 >>> Save $15 and get a SHRM tote!
Employers are offering creative perks to attract and retain today’s workers.
Plus all the HR resources you need to be more efficient and effective this fall!
Prepare for your exam with the guidance of a SHRM-certified instructor in Boston, Oct. 24-26.
Learn how to make the business case for diversity, October 25-27.
The federal government is seeking your ideas to combat cyberthreats.
The National Institute of Standards and Technology (NIST) issued a request for information in the Feb. 26, 2013, Federal Register asking for comments to help develop a set of voluntary standards that would be a first step in creating a national cybersecurity framework.
The framework will consist of standards, methodologies, procedures and processes that align policy, business and technological approaches to address cyber risks, the announcement said.
The request for information, which President Barack Obama called for in his Feb. 12, 2013, executive order on cybersecurity, seeks input from critical infrastructure operators, including industries such as utilities, telecommunications, transportation, health care and financial institutions; federal, state and local government agencies; standards-setting organizations; and other interested parties.
The framework will not dictate one-size-fits-all solutions; rather, it will provide guidance that is technology-neutral that recognizes the different needs and challenges within and among critical infrastructure sectors, NIST said.
In specific questions within the request for information, NIST solicits information about how organizations assess risk; how cybersecurity factors into that risk assessment; the current usage of existing cybersecurity frameworks, standards and guidelines; and other management practices related to cybersecurity.
NIST said it will engage with critical infrastructure stakeholders, through a voluntary consensus-based process, to develop the standards, guidelines and best practices that will make up the framework. This will include holding interactive workshops with industry and academia and doing other forms of outreach.
Comments are due by 5 p.m. ET on April 8, 2013, and should be e-mailed to firstname.lastname@example.org with the subject line: “Developing a Framework to Improve Critical Infrastructure Cybersecurity.”
Roy Maurer is an online editor/manager for SHRM.
Follow him on Twitter @SHRMRoy.
Dueling Cybersecurity Proposals Center Around Standards, Threat Sharing, SHRM Online Safety & Security, February 2013
Cybersecurity Bill Dies, Executive Order on the Way?, SHRM Online Safety & Security, November 2012
SHRM Online Safety & Security page
You have successfully saved this page as a bookmark.
Please confirm that you want to proceed with deleting bookmark.
You have successfully removed bookmark.
Please log in as a SHRM member before saving bookmarks.
Your session has expired. Please log in again before saving bookmarks.
Please purchase a SHRM membership before saving bookmarks.
An error has occurred
Recommended for you
Join SHRM's exclusive peer-to-peer social network
SHRM’s HR Vendor Directory contains over 3,200 companies