Cybersecurity Framework Comments – 12-28-13

This is the last in a series of posts about public comments submitted in response to the publication of the NIST Preliminary Cybersecurity Framework (PCSF). The earlier posts are listed below.

Cybersecurity Framework Update – 11-23-13

Cybersecurity Framework Comments – 11-30-13

Cybersecurity Framework Comments – 12-07-13

Cybersecurity Framework Comments – 12-14-13

Cybersecurity Framework Comments – 12-21-13

There were no new comments posted to the PCSF comment web site this week. I suspect that this means that all of the comments that were received in time (or even reasonably close to ‘in time’) have been posted. With the short time frame that NIST has in publishing the CSF I would not blame them for refusing to accept any additional comments.

I am still surprised by the relative lack of comments from the standard corporate commenters, especially from the chemical community. The ACC (part 1 and part 2) and Merc (part 1 and part 2) were the only two chemical commenters. This is kind of surprising because the chemical industry (under CFATS) and the pharmaceutical industry have some of the highest potential of seeing the CSF merged into current regulatory frameworks under EO 13636 §8(b).