USTelecom—a trade association representing the nation’s largest internet service providers—has asked NIST to connect its cybersecurity framework to the new performance goals it is developing for critical infrastructure, under direction from the White House. These performance goals are an extension by the Biden administration of policies from the Obama administration, which excluded ISPs on the grounds that they were already incentivized by the operational and reputation dangers of inadequate security. The association also argued against expanding the Cybersecurity Framework to address non-cyber risks, at the risk of diluting its focus.
Source: