The Case for Flexible NIST Security Standards

A public dialogue on the role and reach of National Institute of Standards and Technology (NIST) as a rule maker and as a standards writer for federal cybersecurity is essential to understanding the limits of security rule making in the present federal environment. NIST should delay converting its guidelines into rules until advances in the technology permit such conversion.