Evaluating and Improving Cybersecurity Resources

On February 22, 2022, NIST issued a public Request for Information (RFI), “Evaluating and Improving NIST Cybersecurity Resources: The Cybersecurity Framework and Cybersecurity Supply Chain Risk Management.” The RFI sought information on the use of the NIST Cybersecurity Framework as well as recommendations to improve the effectiveness of the Framework and its alignment with other cybersecurity resources. The RFI also sought suggestions to inform other cybersecurity efforts at NIST, especially related to supply chain cybersecurity risks. This document represents an initial, high-level summary of the RFI responses.