[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-310265-105":59,"doc-detail-310265-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","comptia-comments-on-nist-cybersecurity-framework-preliminary-cybersecurity-framework-review","CompTIA Comments on NIST Cybersecurity Framework - Preliminary Cybersecurity Framework Review","","CompTIA submits comments to the NIST Request for Comments on a preliminary cybersecurity framework aimed at improving critical infrastructure cybersecurity under Executive Order 13636. The response highlights two priorities: making the framework easier for small and medium sized businesses (SMBs) to adopt and ensuring a trained, certified workforce can implement and continuously monitor framework functions. It stresses the need for shared security terminology, addresses SMB awareness and resource constraints, and proposes online interactive, crowd-sourced implementation support.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/comptia-comments-on-nist-cybersecurity-framework-preliminary-cybersecurity-framework-review/310265/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/comptia-comments-on-nist-cybersecurity-framework-preliminary-cybersecurity-framework-review/310265.png","ImageObject",300,407,{"name":92,"@type":93},"Angel","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-31","2026-09-20",true,{"@type":102,"interactionType":103,"userInteractionCount":29},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What two main priorities does CompTIA focus on in its feedback?","Question",{"text":112,"@type":113},"CompTIA focuses on (1) how easily SMBs can adapt the framework and (2) the ability to have a trained and certified workforce to carry out the framework functions.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Why does CompTIA emphasize shared language for SMB adoption?",{"text":117,"@type":113},"CompTIA argues that common terminology helps reduce miscommunications and lowers resistance, and that attention to language can ease adoption.",{"name":119,"@type":110,"acceptedAnswer":120},"What does CompTIA suggest to help SMBs when implementing the framework?",{"text":121,"@type":113},"CompTIA recommends an online interactive tool where SMBs can share experiences, best practices, case studies, challenges, and other implementation feedback through a crowd-sourcing approach.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},310265,1790917228,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":29,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":24,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":144,"preview_page_count":4},687207412472,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","The Computing Technology Industry Association Docket No.: 13090978 – 378 – 01 National Institute of Standards and Technology Request for Comments on the Preliminary Cybersecurity  \nFramework  \n\\# \\# \\R Ab􀀜􀀚 \u003C􀀜3􀀜 EO aV W\\Ub ]\\􀀚 21 􀀞􀀞􀀞  \neee􀀜Q][^bWO􀀜]`U  \nOn behalf of CompTIA, thank you for the opportunity to provide comments on the NIST framework entitled,“Improving Critical Infrastructure Cybersecurity Executive Order 13636.” CompTIA has been an active participant in this process, attending three workshops on this matter, and engaging with NIST staff during the last several months. We appreciate the opportunity to be an active partner and look forward to continuing our dialogue.  \nAs you may know, CompTIA is a nonprofit trade association representing more than 2000 member companies. Our members include computer hardware manufacturers, software publishers, and a large number of small and medium sized IT service providers, as well as the distribution partners that bring these products and services to market.  \nCompTIA is also the leading provider of vendor neutral IT workforce certifications. We believe that industry recognized certifications play a critical role in our national and economic security. Those responsible for hiring the best human talent must have confidence – before a breach or breakdown occurs-that employees are trained and equipped in a manner that can be identified, measured, and validated.  \nOur feedback on the draft revolves around two main priorities: 1) the ease with which small and medium sized business (SMBs) can adapt the framework; and 2) the capability to have a trained and certified workforce to carry out the framework functions. SMBs are an integral part of our cybersecurity ecosystem and often enjoy critical partnerships with larger organizations and government. However, their resources, both financial and in manpower, must be a consideration in standard setting, voluntary or otherwise. Additionally, the capability of the workforce, both in the private sector and at the federal level, to operate technology and carry out functions in a way that minimizes cybersecurity threats is critical to the broader objective of achieving a reliable bulwark against cyber threats.  \nAdoption by Small and Medium Sized Businesses  \nDepending on the definition used, the number of SMBs that own or operate critical infrastructure ranges from 4,620 to 13,861 1. Using even the most conservative estimate, this still represents a large number of organizations that may wish to comply with the voluntary framework. As such, this framework must be navigable to organizations ofall sizes. Use of a common lexicon when describing security issues is especially critical in order to facilitate wide spread adoption by the SMBs. There is a gap between executives (44%) and IT function employees (70%) when viewing security change, with the latter more inclined to view such efforts as “drastic” and the former underestimating the effort that goes into such work.2 Attention to language could ease some of these miscommunications and lower the resistance to adoption. The framework is an ideal  \n1 U. S. Economic Census, 2010.  \n2 CompTIA report,“Information Security Trends,” November 2013.  \nplace to help establish this common lexicon.  \nAnother concern as it relates to the SMB community is general awareness and understanding of the framework. While the framework presumes that a company will have certain resources, SMBs often lack an IT staff and a security infrastructure. The typical SMB is focused on day-to-day operations and limited bandwidth gives little ability to entertain state/federal voluntary compliance regimes. As such, incentives for adoption for SMBs are an option that should be explored. The private sector has already begun to link security practices to an industry-recognized organizational credential or other voluntary assessment. This avenue provides complying businesses with a market differentiator and can be used to retain and","cbCaimMJ89UWdXmw","https://ap.wps.com/l/cbCaimMJ89UWdXmw","pdf",149426,"English","# Adoption by Small and Medium Sized Businesses\n## Common lexicon and awareness\n## Incentives and online interactive tool\n# The Cyber Workforce\n## Certifications and workforce effectiveness","[{\"question\":\"What two main priorities does CompTIA focus on in its feedback?\",\"answer\":\"CompTIA focuses on (1) how easily SMBs can adapt the framework and (2) the ability to have a trained and certified workforce to carry out the framework functions.\"},{\"question\":\"Why does CompTIA emphasize shared language for SMB adoption?\",\"answer\":\"CompTIA argues that common terminology helps reduce miscommunications and lowers resistance, and that attention to language can ease adoption.\"},{\"question\":\"What does CompTIA suggest to help SMBs when implementing the framework?\",\"answer\":\"CompTIA recommends an online interactive tool where SMBs can share experiences, best practices, case studies, challenges, and other implementation feedback through a crowd-sourcing approach.\"}]","CompTIA Comments on NIST Cybersecurity Framework - Preliminary Cybersecurity Framework Review | PDF",1789880442,13]