Joseph Marks writes Matthew Barrett, program manager for NISTâs cybersecurity framework, told reporters Wednesday that NIST expects to release the guidance within the next couple of months.
He said the NIST document Interagency Report 8170 has undergone seven revisions in the past year and that the agency aims to merge its ârisk management documents into a singular approach for federal agencies.â
âWhat weâre trying to do is weâll say, âHey, those who want to augment their [Federal Information Security Management Act]-based practice with this cybersecurity framework thing that theyâve been hearing so much about, hereâs a path to do so,’â Barrett added.