NIST Unveils Plan to Get C-Suite Involved in Risk Management

The latest edition of the ISMG Security Report features an interview with NIST's Ron Ross about revised guidance in its Risk Management Framework, which now addresses how to get C-suite executives to help shape information risk management, and build it into the bigger picture that top-level execs deal with.