NIST releases its Risk Management Framework 2.0
By MYBRANDBOOK
The National Institute of Standards and Technology posted the newest update to its Risk Management Framework.
“RMF 2.0 is the first framework in the world to address security, privacy, and supply chain risk in an integrated manner - at the organization, mission/business process, and system levels,” NIST Fellow Ron Ross wrote in a Twitter post.
RMF 2.0’s full name is the NIST Special Publication 800-37 Revision 2, Risk Management Framework (RMF) for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy.
NIST said RMF 2.0 adds a step called Prepare and includes seven major objectives.
Prepare is intended to help organizations facilitate effective communication between executives and employees. It also guides users to enable enterprise-wide identification of privacy and security controls, reduce complexity of IT systems and applications, eliminate unnecessary functions and, ultimately prioritize resources for high value assets and protect those accordingly.
NIST listed the seven objectives of the Risk Management Framework -
1. Provide closer linkage and communication to top executives and governance-level employees and the rest of the organization
2. Create critical risk management preparatory activities at all necessary levels
3. Show how the NIST Cybersecurity Framework can be aligned with the RMF
4. Include privacy risk management in the RMF
5. Promote trustworthy secure systems by aligning the RMF with NIST framework for engineering such secure systems
6. Integrate supply chain risk management concepts into the RMF
7. Enable organizations to generate a “control selection approach” as a complement to NIST SP 800-53 Revision 5 consolidated control catalog.
“By achieving the above objectives, organizations can simplify RMF execution, employ innovative approaches for managing risk, and increase the level of automation when carrying out specific tasks,” NIST added.
BHIM to join e-commerce, competing with PhonePe and Google Pay
The government-supported payment software BHIM is getting ready to join t...
The latest version of X helps prevent deepfakes on social medi
To combat deepfakes and shallowfakes, Elon Musk revealed a new update t...
India and Namibia collaborate on a payment system similar to U
Once operational, the platform will enable digital transactions in Namibia,...
Sebi issues show-cause notices to six Adani group firms
Sebi issued show-cause notices to six Adani Group firms, including Adani ...
Technology Icons Of India 2023: Alok Ohrie
Alok plays a critical role in the Government of India’s Atal Innovat...
Technology Icons Of India 2023: Rishad Premji
Rishad Premji is the son of the Wipro head Azim Premji and was named a...
Technology Icons Of India 2023: Dr. P D Vaghela
Dr PD Vaghela serves as the Chairperson of Telecommunications Regulato...
PGCIL transforming India with its wide power transmission network
Engaged in power transmission, POWERGRID or PGCIL is a stated owned In...
STPI encouraging software exports from India
Software Technology Parks of India (STPI) is an S&T organization under...
ITI Limited widening its focus area
ITI Limited is a public sector undertaking company, has manufacturing ...
ADITYA INFOTECH LTD.
Aditya Infotech Ltd. (AIL) – the technology arm of Aditya Group, is ...
BEETEL TELETECH LTD.
: Beetel is one of the oldest and most reputed brands in the Industry,...
SATCOM INFOTECH PVT. LTD.
Satcom Infotech Pvt. Ltd is a distribution houses in security in India...