YouTube video by Boston City Council

Implémenter un programme CSRM à Terrebonne avant l'hiver

Town Manager Kyle Brewer updated council on the Army Corps CSRM project and an RFP for appraisals tied to easement acquisitions (town share cited as $525,000), waterline resilience work including an intercoastal bore beginning Sept. 21, continuing subsurface park work, ladder-truck committee recommendations, and an ebike/multiuse-path workshop scheduled Sept. 28.

By Dr Nicholas Biddle, Fellow, ANU Centre for Aboriginal Economic Policy Research (CAEPR) and Depity Director, ANU Centre for Social Research and Methods (CSRM). Reviewed by Prof. Dennis Foley (Univer...

The National Institute of Standards and Technology (NIST) has released NIST SP 1308, the “Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide”. Published in March 2026, this strategic document provides a structured methodology to integrate cybersecurity risk management (CSRM) into broader enterprise risk management (ERM) strategies. The guide emphasizes workforce planning to address the urgent need for agile human resource adaptation to defend against rapidly evolving cyber threats. Unifying Core Security Frameworks The quick-start guide integrates three foundational NIST resources to establish a holistic, workforce-focused enterprise risk management process. Organizations leverage the Cybersecurity Framework (CSF) 2.0 to define security outcomes, alongside the NICE Framework to identify the technical competencies required of staff. By bridging these tools with NIST IR 8286 governance templates, leadership can break down silos and make informed decisions regarding hiring, upskilling, and resource allocation. To operationalize this integration, NIST outlines an implementation lifecycle that centers on scoping a comprehensive CSF Organizational Profile. Stakeholders initiate this phase by conducting a business impact analysis to identify high-value assets and align critical security risks with the enterprise mission. Cross-functional teams then gather essential intelligence, including risk appetite statements, regulatory requirements, and comprehensive inventories of existing workforce skill sets. Organizations generate current and target profiles to map their existing security posture against desired long-term objectives visually. This comparative mapping enables a comprehensive gap analysis, in which designated risk owners assess specific vulnerabilities and determine whether internal teams possess the requisite competencies to address them. Stakeholders then execute a prioritized action plan to mitigate these exposures through targeted human resource interventions and security enhancements. Addressing Workforce Vulnerabilities When internal capabilities fall short of target security requirements, organizations must implement decisive interventions to close identified talent gaps. Security teams may respond by recruiting new talent, augmenting existing staff through third-party contracting, or launching internal developmental programs. If workforce expansion proves impossible, leadership must adjust the overarching strategy by changing the risk response to avoid, transfer, or accept the risk entirely.​ Because modern threat environments are highly dynamic, the NIST guide mandates a continuous lifecycle of managing, evaluating, and adjusting applied strategies. Cross-functional teams, including financial staff and security practitioners, must continuously monitor risk responses to ensure that technical controls remain consistent across the organization. If any planned workforce intervention underperforms, organizations must rapidly pivot by exploring alternative staff reassignments or modifying the risk treatment. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post NIST Releases Quick-Start Guide on Cybersecurity, Risk, and Workforce Management appeared first on Cyber Security News .

Introduction: A critical disconnect has long plagued organizations: cybersecurity teams speak in technical threats and vulnerabilities, while the boardroom focuses on strategic objectives and financial risk. The newly revised NIST IR 8286 series directly bridges this gap, providing a formal methodology to integrate Cybersecurity Risk Management (CSRM) into Enterprise Risk Management (ERM). This integration ensures that cybersecurity posture is understood as a core business concern, enabling leaders to make informed decisions that align security investments with mission success.