Photo: Grandbrothers/Adobe Stock

Over 10 years ago, in a move to improve the resilience of the U.S.' critical infrastructure to cyberattacks, then-President Barack Obama tasked the National Institute for Standards and Technology (NIST) with creating a cybersecurity framework by working with the private sector to identify industry best practices. 

Since then, that framework was only updated once, in 2018, in what was then referred to as the version 1.1.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Cassandre Coyer

Washington D.C.-based legal technology reporter, covering new things happening around data privacy and cybersecurity law, e-discovery and emerging technologies.