The Federal Aviation Administration, in their comments on the Initial Public Draft of SP 800-137, recommended that NIST add
more implementation-specific text. There’s a lot of general text on why continuous monitoring is good, and high level guidance, but could be more implementation guidance or examples of implementation alternatives.
The FAA’s complete comments are attached below.
Leave a Reply