Not a Member? Get access to HR news and resources that you can trust.
Here is how HR can help prevent the missteps that could cost your company big in court.
Is your employee handbook ready for the changing world of work? With SHRM’s Employee Handbook Builder get peace of mind that your handbook is up-to-date.
60+ new SHRM Seminar dates in 10 U.S. cities and virtually.
Expand your influence and learn how to become an effective leader -- Join us in Phoenix, AZ, October 2-4, 2017.
The federal government is seeking your ideas to combat cyberthreats.
The National Institute of Standards and Technology (NIST) issued a request for information in the Feb. 26, 2013, Federal Register asking for comments to help develop a set of voluntary standards that would be a first step in creating a national cybersecurity framework.
The framework will consist of standards, methodologies, procedures and processes that align policy, business and technological approaches to address cyber risks, the announcement said.
The request for information, which President Barack Obama called for in his Feb. 12, 2013, executive order on cybersecurity, seeks input from critical infrastructure operators, including industries such as utilities, telecommunications, transportation, health care and financial institutions; federal, state and local government agencies; standards-setting organizations; and other interested parties.
The framework will not dictate one-size-fits-all solutions; rather, it will provide guidance that is technology-neutral that recognizes the different needs and challenges within and among critical infrastructure sectors, NIST said.
In specific questions within the request for information, NIST solicits information about how organizations assess risk; how cybersecurity factors into that risk assessment; the current usage of existing cybersecurity frameworks, standards and guidelines; and other management practices related to cybersecurity.
NIST said it will engage with critical infrastructure stakeholders, through a voluntary consensus-based process, to develop the standards, guidelines and best practices that will make up the framework. This will include holding interactive workshops with industry and academia and doing other forms of outreach.
Comments are due by 5 p.m. ET on April 8, 2013, and should be e-mailed to firstname.lastname@example.org with the subject line: “Developing a Framework to Improve Critical Infrastructure Cybersecurity.”
Roy Maurer is an online editor/manager for SHRM.
Follow him on Twitter @SHRMRoy.
Dueling Cybersecurity Proposals Center Around Standards, Threat Sharing, SHRM Online Safety & Security, February 2013
Cybersecurity Bill Dies, Executive Order on the Way?, SHRM Online Safety & Security, November 2012
SHRM Online Safety & Security page
You have successfully saved this page as a bookmark.
Please confirm that you want to proceed with deleting bookmark.
You have successfully removed bookmark.
Please log in as a SHRM member before saving bookmarks.
Your session has expired. Please log in again before saving bookmarks.
Please purchase a SHRM membership before saving bookmarks.
An error has occurred
Recommended for you
Don’t Lose Sight! What Does Poor Preventive Care Cost Your Business?
CA Resources at Your Fingertips
SHRM’s HR Vendor Directory contains over 3,200 companies