Why NIST’s Framework Avoids a One-Sized-Fits-All Approach to Cybersecurity

Matthew Barrett, program manager of the National Institute of Standards and Technology’s Cybersecurity Framework, says federal agencies and private sector companies don’t fully understand the flexibilities built into the guidance and aren’t fully taking advantage of the framework.