Cybersecurity Management 2014: A Today’s General Counsel Survey

Roughly half of survey participants said their organization had experienced a data breach, and about the same percentage say their industry is “vulnerable.” Yet when asked how familiar they were with the recently published National Institute of Standards and Technology (NIST) framework for a cybersecurity infrastructure, about one-third said they had never heard of it; one-third had heard of it but had not read or reviewed it; and one-third had read it/reviewed it, or were already using or planning to use it. Experts who commented on this finding note that the NIST framework will soon be the de facto standard for appropriate safeguards when the issue is raised in litigation.