Since release of the final version of the National Institute of Standards and Technology (NIST) Framework for Improving Critical Infrastructure Cybersecurity there has been widespread discussion about the value and effectiveness of the Framework for utilities and those other entities which make up the critical infrastructure sectors. Some have argued that the Framework has already been out-paced by industry specific guidelines (such as the recently approved FERC Standards), and lacks enforcement "teeth" because it is voluntary. While as a general matter I agree with the latter point, neither argument answers the most important question about the Framework's worth. Will it help me achieve better cybersecurity? I believe that the Framework, will provide critical infrastructure businesses with far greater cybersecurity value and effectiveness than is now generally acknowledged. Why is this true?
To read the full text by Joseph M. Burton, please visit the Grid Insights website.
This article is for general information and does not include full legal analysis of the matters presented. It should not be construed or relied upon as legal advice or legal opinion on any specific facts or circumstances. The description of the results of any specific case or transaction contained herein does not mean or suggest that similar results can or could be obtained in any other matter. Each legal matter should be considered to be unique and subject to varying results. The invitation to contact the authors or attorneys in our firm is not a solicitation to provide professional services and should not be construed as a statement as to any availability to perform legal services in any jurisdiction in which such attorney is not permitted to practice.
Duane Morris LLP, a full-service law firm with more than 700 attorneys in 24 offices in the United States and internationally, offers innovative solutions to the legal and business challenges presented by today's evolving global markets. Duane Morris LLP, a full-service law firm with more than 700 attorneys in 24 offices in the United States and internationally, offers innovative solutions to the legal and business challenges presented by today's evolving global markets. The Duane Morris Institute provides training workshops for HR professionals, in-house counsel, benefits administrators and senior managers.