NIST released the draft of cybersecurity framework, which outlines how private companies can protect themselves against cyberattacks, and security breaches. The document also examines how the companies could do all that while protecting privacy and civil liberties. The adopting of the cybersecurity framework would be voluntary for companies and could help companies mitigate the numerous cyber threats. NIST will now take public comments for 45 days while the final cybersecurity framework is planned for February 2014. The draft reads: “The framework can be used to help identify and prioritize actions for reducing cybersecurity risk and is a tool for aligning policy, business, and technological approaches to managing that risk””]
Source: http://securityaffairs.co/wordpress/19024/laws-and-regulations/nist-cybersecurity-framework.html