The Internet Security Alliance asked the White House...
The Internet Security Alliance asked the White House to institute a “beta testing phase” for the Cybersecurity Framework, which the National Institute of Standards and Technology is developing in consultation with industry stakeholders. NIST is collecting feedback on a preliminary…
Sign up for a free preview to unlock the rest of this article
Timely, relevant coverage of court proceedings and agency rulings involving tariffs, classification, valuation, origin and antidumping and countervailing duties. Each day, Trade Law Daily subscribers receive a daily headline email, in-depth PDF edition and access to all relevant documents via our trade law source document library and website.
version of the framework it released late last month. The Department of Homeland Security is set to push for full-scale implementation of the framework once NIST releases the final version in February. The government’s difficulty in implementing online registration of healthcare plans under the Affordable Care Act is evidence of the problems with “adhering to artificially determined deadlines and not doing adequate testing,” said ISA President Larry Clinton in a news release Friday. “We are simply proposing the federal government do what any private sector entity would do before it goes to a full launch of a new product or service -- you run a beta test with selected target audiences and generate data to refine the product before you go to full deployment.” Clinton said NIST has been unable to fully adhere to the guidelines in President Barack Obama’s cybersecurity executive order, namely that the framework address cost effectiveness. Data gleaned from beta testing “can then be used to demonstrate what elements of the framework are cost effective for various types of organizations and what sort of incentives will be needed to encourage voluntary adoption of needed elements which are not determined to be cost effective,” Clinton said. Beta testing would also allow DHS to “work with the organizations on implementation, track the issues and costs and deploy the incentives provided to manage the costs,” he said. “If we can reliably report this data of cost effectiveness to the community we will have a much better chance to encourage voluntary participation of framework techniques on a sustainable basis."