IT Governance USA responds to NIST’s request for information
Calder said NIST should consider the following:
• Voluntary participation with incentives
• Alignment with existing standards
• Risk-based assessment model
• Balance business impact with consumers’ privacy interests
• Flexible approach to allow corporate scale
NIST is developing a Privacy Framework to pair with its Cybersecurity Framework. In its RFI, NIST said it envisions that the Privacy Framework will be a voluntary tool for organizations to better identify, assess, manage, and communicate privacy risks so that individuals can enjoy the benefits of innovative technologies with greater confidence and trust.
The RFI solicits information regarding organizational considerations for privacy risk management, the structure of the Privacy Framework, and specific privacy practices to be included. The RFI responses will inform the development of an outline of the framework that is anticipated to be issued in early 2019.
IT Governance USA
IT Governance USA is the single-source provider of books, tools, training, and consultancy for IT governance, risk management, and compliance. It is a leading authority on data security and IT governance for business and the public sector. IT Governance is ‘non-geek’, approaching IT issues from a non-technology background, and talking to management in its own language. Its customer base spans Europe, the Americas, the Middle East, and Asia. More information is available at www.itgovernanceusa.com.
Mitchell Slepian
IT Governance USA
+ 1 917-794-3109
email us here
Legal Disclaimer:
EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
