The NIST Cyber Security Framework: Implications For Your Clients

Deadline to Register: January 11, 2015

Pursuant to the issuance of Executive Order 13636, Improving Critical Infrastructure Cybersecurity, in February 2013, the National Institute of Standards & Technology ("NIST") collaborated with private and public sector stakeholders to develop a voluntary framework based on existing standards, guidelines, and practices intended to mitigate cyber risks to critical infrastructure. NIST released the first version of the Framework for Improving Critical Infrastructure Cybersecurity (the "Framework") in February, 2014. The Framework is a prioritized, flexible, repeatable, and cost-effective approach to help owners and operators of critical infrastructure to manage cybersecurity-related risk.

Although this is the first iteration of the Framework, and although NIST will issue a companion Roadmap that discusses next steps and to identify key areas of cybersecurity development, alignment, and collaboration, there is plenty of work to do in evangelizing and implementing the Framework:  Almost immediately, numerous vendors came out of the "woodwork" purporting to assist in Framework implementation, some of which has created confusion and myths about the Framework. Further, experts disagree about the Framework's purpose and utility. Finally, many stakeholders —both during and after the Framework creation— have been consumed with worry that the Framework will not be voluntary and will be another source of regulation.  Not surprisingly, some regulators have begun to adapt their preexisting examinations and audits to the Framework (i.e., using Framework nomenclature), although this doesn't really fulfill the aforementioned fears.

The intent of this CLE is to introduce the audience to the basic concepts and purpose of the Framework, and to suggest probable current and future implications for their clients.

The Computer and Technology Section Council will meet at 11:30 a.m. followed by lunch and the CLE at Noon.

Presenters:

Sean Harrington, MCSE, CISSP, CSOXP, CHFI, CCFP, J.D. Attorney Client Privilege, a Minnesota and Texas LLC digital forensics professional services 

Emily Duke, Esq. Duke Law Office PLLC and CyberSmart Law - Ms. Duke is an experienced and business-minded lawyer with 20 years of big-law experience who, through Duke Law Office PLLC, now helps companies of all sizes successfully handle disputes in the areas of trade secrets, data breaches, contract disputes, internal investigations, enforcement of non-compete agreements, supplier and customer disputes, M&A litigation, and shareholder litigation.  She recently launched CyberSmart Law, a boutique law firm  specializing in representing businesses in the areas of protection of trade secrets, data vulnerability assessments, and data protection.
 

CLE Credits:

Cost:

Section Member:  FREE
MSBA Member but not members of the Computer and Technology Law Section:   $15
Non-MSBA Member:  $35
Law Student: FREE

Join the Computer and Technology Law Section and attend the CLE for FREE!
MSBA Members who are not members of the Computer and Technology Law Section can join the section and attend this CLE for FREE.  Your section membership will expire on June 30, 2015. This offer is not available using online registration. Please call Tram Nguyen at 612-278-6316 to take advantage of this offer.

Remote Participation: