Date Published: March 18, 2024
Comments Due: May 16, 2024 (public comment period is CLOSED)
Email Questions to:
ir7621-comments@nist.gov
NIST plans to update NIST IR 7621 Rev. 1, Small Business Information Security: The Fundamentals and is issuing this Pre-Draft Call for Comments to solicit feedback. The public is invited to provide input by 12 p.m. ET on May 16, 2024.
Since NIST IR 7621 Revision 1 was published in November of 2016, NIST has developed new frameworks for cybersecurity and risk management and released major updates to critical resources and references. This revision will focus on clarifying publication audience, making the document more user-friendly, aligning with other NIST guidance, updating the narrative with current approaches to cybersecurity risk management, and updating appendices. Before revising, NIST invites the public to suggest changes that would improve the document’s effectiveness, relevance, and general use to better help the small business community understand and manage their cybersecurity risk.
NIST welcomes feedback and input on any aspect of NIST IR 7621 and additionally proposes a list of non-exhaustive questions and topics for consideration:
The comment period closes 12 p.m. ET on May 16, 2024. Please submit comments to ir7621-comments@nist.gov with "Comments on NIST IR 7621” in the subject field. Please use this comment template to submit your comments.
None selected
Publication:
See IR 7621r1
Supplemental Material:
Comment template (xlsx)
Document History:
03/18/24: IR 7621 Rev. 2 (Draft)