The National Institute of Standards and Technology has updated its Cybersecurity Framework in response to user comments that the original framework was too vague in its Implementation Tiers, the measure by which organizations gauge their approach to managing cybersecurity risk. […]