Baldrige Cypersecurity Excellence Builder - News Announcement

DRAFT NEWS ITEM TO ANNOUNCE CALL FOR FEEDBACK

NIST Releases Baldrige Cybersecurity Excellence Builder for Public Comment

On September 15, 2016, NIST released a draft of the Baldrige Cybersecurity Excellence Builder. The Baldrige Cybersecurity Excellence Builder (BCEB) is a voluntary self-assessment tool that enables organizations to better understand the effectiveness of their cybersecurity risk management efforts. BCEB helps leaders of organizations identify opportunities for improvement based on their cybersecurity needs and objectives, as well as their larger organizational needs, objectives, and outcomes. Using this self-assessment, organizations can:

• determine cybersecurity-related activities that are important to your business strategy and critical service delivery;

• prioritize investments in managing cybersecurity risk;

• determine how best to enable your workforce, customers, suppliers, partners, and collaborators to be risk conscious and security aware, and to fulfill their cybersecurity roles and responsibilities;

• assess the effectiveness and efficiency of your use of cybersecurity standards, guidelines, and practices;

• assess the cybersecurity results you achieve; and

• identify priorities for improvement.

Like the Framework for Improving Critical Infrastructure Cybersecurity, BCEB may be used voluntarily and acknowledges the principle that cybersecurity cannot be addressed via a ‘one-size-fits-all’ approach. BCEB is adaptable and scalable to your organization's needs, goals, capabilities, and environment. It does not prescribe how you should structure your organization's cybersecurity policies and operations, but through interrelated sets of open-ended questions, highlights approaches that may best fit your organization.

NIST is always interested in your feedback. To officially register your thoughts regarding the draft Baldrige Cybersecurity Excellence Builder, please send your comments to baldrigecybersecurity@nist.gov by Thursday, Dec. 15, 2016. NIST anticipates finalizing version 1 of the BCEB early in calendar year 2017.