M5D1: The Critical Infrastructure Cybersecurity Framework

37246M5D1: The Critical Infrastructure Cybersecurity Framework

In Executive Order 163636 (Links to an external site.)Links to an external site., President Obama directed The National Institute of Standards (NIST) (Links to an external site.)Links to an external site. to collaborate with other government agencies and the private sector to develop a voluntary framework for increasing the resilience of the cyber systems underlying domestic critical infrastructure. The NIST Cybersecurity Framework is now becoming a de facto standard and a demonstration of best practices in cybersecurity. The standards however remain voluntary. Recalling the discussion of cybersecurity paradigms in Module 1, which of the paradigms does such a set of standards support? Could it fit in more than one?
Question

After completing the assigned readings for the module, please respond to the following question in your initial post:

What are the advantages and disadvantages of using a voluntary framework as a policy mechanism to improve a nation’s critical infrastructure protection and its resilience in the face of a potential domestic and/or international cyber-attacks? Please cite course materials and/or outside scholarly research to support your conclusions

Read:

Required
Module Notes: Critical Infrastructure and Cybersecurity
Bayuk, J. L., Schmidt, J., Weiss, J., Sachs, M. H., Healey, J., & Rohmeyer, P. (2012). Cyber Security Policy Guidebook. Hoboken: Wiley.
Chapter 6.5
Chapter 7 (review)
and articles……