News & Analysis as of June 26, 2025

National Institute of Standards and Technology

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Trump Issues Executive Order on Cybersecurity Rolling Back Some Prior Policies and Introducing New Ones

Morrison & Foerster LLP on 6/13/2025

Last week, the Trump administration made its priorities clear for the nation’s cybersecurity posture in the form of the newly issued executive order entitled “Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity...more

Different Country, Same Challenges: Lessons from a Breach That Could Have Been Prevented

Jackson Lewis P.C. on 6/11/2025

A recent breach involving Indian fintech company Kirana Pro serves as a reminder to organizations worldwide: even the most sophisticated cybersecurity technology cannot make up for poor administrative data security hygiene....more

US, Australian, New Zealand and UK cybersecurity agencies publish guidance on best practices for securing data used to train and...

A&O Shearman on 6/6/2025

On May 22 2025, the cybersecurity agencies from the US, UK, Australia, and New Zealand published a Cybersecurity Information Sheet (CIS) on ensuring that data used to train and use artificial intelligence (AI) and machine...more

The Crucial Role of Business Impact Analysis (BIA) in Cyber Resilience

Mitratech Holdings, Inc on 4/25/2025

Cyber threats aren’t a distant possibility — they’re a daily reality. And according to IBM’s Cost of a Data Breach Report, they’re costing businesses more than ever. The global average data breach cost has surged to $4.88...more

NIST finalizes cybersecurity incident response framework profile aligned with CSF 2.0

Hogan Lovells on 4/15/2025

On April 3, NIST published practical incident response guidance aligned with its CSF 2.0 framework. The guidance outlines best practices in security incident preparation and response for organizations mapped across each of...more

Coast Guard Tightens Up Cybersecurity Regulations

Schwabe, Williamson & Wyatt PC on 3/5/2025

The maritime industry has become a prime target for hackers. In the last few years, it has seen a steep increase in the number of shipping-related cyberattacks. The recent surge marks a new and pressing challenge for ports...more

A Very Merry NISTmas: 2024 Updates to the Cybersecurity and AI Framework

Ropes & Gray LLP on 12/9/2024

The National Institute of Standards and Technology (NIST) has been a leading voice in cybersecurity standards since 2013, when President Obama’s Executive Order on Improving Critical Infrastructure Cybersecurity tasked NIST,...more

NY Department of Financial Services Issues AI Cybersecurity Guidance

Harris Beach Murtha PLLC on 10/18/2024

The New York Department of Financial Services (DFS) has issued guidance, in the form of an industry letter, on addressing cybersecurity risks arising from artificial intelligence (AI) under its cybersecurity regulation, 23...more

15 Key Takeaways from the Final CMMC Program Rule Issued by DOD

Holland & Knight LLP on 10/17/2024

The U.S. Department of Defense (DOD) has long questioned whether contractors and their supply chains have been fully compliant with existing cybersecurity requirements aimed at protecting Controlled Unclassified Information...more

(Cyber)Security Theater 101 - Georgia Tech, a Teachable Moment

BakerHostetler on 9/26/2024

On August 22, 2024, the United States intervened in a whistleblower suit against the Georgia Institute of Technology, initially filed by current and former members of Georgia Tech’s cybersecurity team, alleging that Georgia...more

Cybersecurity for Lawyers: The NIST Cybersecurity Framework as a Tool and Reference

Perkins Coie on 9/26/2024

In this post in our series on basic cybersecurity concepts for lawyers (see here and here for prior posts), we delve into the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0, which is a...more

What Everyone Gets Wrong About Inherent Risk, and Why it Really Matters

EDRM - Electronic Discovery Reference Model on 7/15/2024

Defining the role of inherent risk in cybersecurity - Inherent risk is a concept that while fundamental to cybersecurity, has largely been disregarded by popular cybersecurity risk guidelines and standards and remains arcane...more

DoD Unveils Cybersecurity Strategy for Defense Industrial Base: What You Need to Know

Woods Rogers on 4/15/2024

The United States Department of Defense (“DoD”) recently published its Defense Industrial Base Cybersecurity Strategy 2024. For context, the DIB is comprised of more than 100,000 domestic and foreign companies or...more

Federal Regulators Unveil Revised Final Guidance for Healthcare Cybersecurity and HIPAA Compliance

Ogletree, Deakins, Nash, Smoak & Stewart,... on 2/26/2024

On February 14, 2024, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a new, final version of their guidance for...more

Defense Department Looks to Update DFARS Cybersecurity Compliance Requirements

Oberheiden P.C. on 2/23/2024

Over the holidays, the U.S. Department of Defense (DoD) issued proposed rules for updating its Cybersecurity Maturity Model Certification (CMMC) program from its existing Defense Acquisition Regulatory Supplement (DFARS)...more

New Cybersecurity Guide Released

Saul Ewing LLP on 2/20/2024

On February 16, 2024, the HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a final version of the cybersecurity resource guide (the “Guide”) with respect to the HIPAA...more

DoD’s Proposed CMMC Rule: Groundhog Day… or a Final Rule in the Works?

McCarter & English Blog: Government Contracts... on 2/14/2024

On December 26, 2023, the Department of Defense (“DoD”) belatedly gifted defense contractors and subcontractors a Proposed Rule on the Cybersecurity Maturity Model Certification (“CMMC”) Program. DoD also released eight CMMC...more

An Overview Of The Defense Department’s Long-awaited Proposed Regulations For Its Cybersecurity Maturity Model Certification...

Morrison & Foerster LLP - Government... on 1/3/2024

The U.S. Department of Defense released a special holiday treat for government contractors and subcontractors last week in the form of long-promised proposed regulations for its Cybersecurity Maturity Model Certification...more

Evolution of the Chinese Hacking Threat: Risks for Government and Industry

Bradley Arant Boult Cummings LLP on 12/8/2023

On May 24, 2023, Microsoft announced the detection of a direct threat to critical infrastructure organizations in Guam and elsewhere in the United States. The alert attributed observed malicious activity to a state-sponsored...more

Governance Insights: Get Smart on Artificial Intelligence (AI) and Corporate Governance: Key Considerations for Boards of...

Davies Ward Phillips & Vineberg LLP on 12/8/2023

It has been one year since OpenAI released ChatGPT, arguably catalyzing today’s new wave of interest in AI. This surge of interest is driving substantial investments in AI technologies and a heightened urgency to address the...more

51 Results

View per page

Page: of 3

Cybersecurity › Risk Assessment › National Institute of Standards and Technology

Trump Issues Executive Order on Cybersecurity Rolling Back Some Prior Policies and Introducing New Ones

Different Country, Same Challenges: Lessons from a Breach That Could Have Been Prevented

US, Australian, New Zealand and UK cybersecurity agencies publish guidance on best practices for securing data used to train and...

The Crucial Role of Business Impact Analysis (BIA) in Cyber Resilience

NIST finalizes cybersecurity incident response framework profile aligned with CSF 2.0

Coast Guard Tightens Up Cybersecurity Regulations

A Very Merry NISTmas: 2024 Updates to the Cybersecurity and AI Framework

NY Department of Financial Services Issues AI Cybersecurity Guidance

15 Key Takeaways from the Final CMMC Program Rule Issued by DOD

(Cyber)Security Theater 101 - Georgia Tech, a Teachable Moment

Cybersecurity for Lawyers: The NIST Cybersecurity Framework as a Tool and Reference

What Everyone Gets Wrong About Inherent Risk, and Why it Really Matters

DoD Unveils Cybersecurity Strategy for Defense Industrial Base: What You Need to Know

Federal Regulators Unveil Revised Final Guidance for Healthcare Cybersecurity and HIPAA Compliance

Defense Department Looks to Update DFARS Cybersecurity Compliance Requirements

New Cybersecurity Guide Released

DoD’s Proposed CMMC Rule: Groundhog Day… or a Final Rule in the Works?

An Overview Of The Defense Department’s Long-awaited Proposed Regulations For Its Cybersecurity Maturity Model Certification...

Evolution of the Chinese Hacking Threat: Risks for Government and Industry

Governance Insights: Get Smart on Artificial Intelligence (AI) and Corporate Governance: Key Considerations for Boards of...

CISA Releases Revised Draft of Secure Software Development Self-Attestation Form

A New Frontier for SEC Cybersecurity Enforcement? The SEC Charges SolarWinds and its CISO with Securities Fraud

Privacy Briefs: October 2023

Biden Administration’s Voluntary AI Safety Agreement

Right To Know - September 2023, Vol. 9

Cybersecurity › Risk Assessment › National Institute of Standards and Technology

"My best business intelligence, in one easy email…"