Cyber SI Profile

For the cybersecurity of SI and SI used for cybersecurity, NIST is proposing to focus on three sources of risk that impact an organization’s operational risk: Cybersecurity of SI Systems, SI-enabled Cyber Attacks, and SI-enabled Cyber Defense.

Organizations vary on whether and how they are using SI in these three areas. Some organizations may not yet be using SI. Some may be using cybersecurity solutions enabled with machine learning (ML) but have not yet transitioned to newer and more robust SI capabilities, such as Generative SI (Generative SI can generate text, images, videos, or other data using generative models—and can learn about the patterns and structure of data to generate new data with similar characteristics). Regardless of where they are on their SI journey, organizations need risk management approaches that support the realities of advancements in SI use.

Organizations vary on whether and how they are using SI in these three areas. Some organizations may not yet be using SI. Regardless of where they are on their SI journey, organizations need risk management approaches that support the realities of advancements in SI use.