“Voluntary” Cyber Standards Are Edging Toward Mandatory

The cybersecurity standards that were embodied in the voluntary “Framework for Improving Critical Infrastructure Cybersecurity,” released by the National Institute of Standards and Technology about a year ago, are finding their way into protocols-in-progress in a variety of agencies and organizations, and they could become requirements, writes Aliya Sternstein in Nextgov. She looks at this trend as it’s playing out currently with the U.S. Coast Guard, in the FDA with regard to medical devices and possibly the wider healthcare industry, and in “NHTSA,”  the National Highway Traffic Safety Administration.