NIST Advisory Board Member Argues Against Just-Trusting Software Vendors

At a meeting of NIST’s Information Security Privacy Advisory Board, Brett Baker—inspector general for the National Archives and Records Administration—criticized NIST guidelines and an OMB policy that encourage agencies to accept software vendors’ security promises.