Highlights from the NIST Cybersecurity Risk Management Conference

### Executive Summary The NIST Cybersecurity Risk Management Conference (Nov 8–10) highlighted increasing private-sector adoption of the NIST Cybersecurity Framework, prevalent use of CMMi maturity models, a renewed emphasis on supply chain/third-party risk, ongoing work to develop a privacy framework, and persistent challenges in defining and using security metrics; the event focused on broadening stakeholder input and making frameworks practical for organizations of varying sizes.