The Government's Moving From Guidance to Law

The NIST cybersecurity framework was released in 2014. But remember, NIST is guidelines, not laws. By moving toward putting some legal teeth into this, the government's saying quite explicitly that the nudging and encouraging approach hasn't worked or at least it hasn't worked well enough.