A letter addressed to Commerce Secretary Howard Lutnick from a coalition of industry organizations emphasizes the urgent need to sustain funding and support for the National Institute of Standards and Technology’s (NIST) cybersecurity mission. With cyber threats, especially from the People’s Republic of China, targeting U.S. critical infrastructure, the letter stresses that NIST’s leadership in developing cybersecurity standards and guidelines is essential for safeguarding the nation’s digital landscape.
The letter was signed by a variety of industry groups including the Better Identity Coalition (BIC), Coalition to Reduce Cyber Risk (CR2), Cyber Risk Institute (CRI), Cyber Threat Alliance (CTA), Cyberspace Solarium Commision 2.0, Information Technology Industry Council (ITI), Partner Nation Cyber Security Coalition (PNCC), and the Telecommunications Industry Association (TIA). The organizations were united in their call for continued investment in NIST’s critical work, during a time when the U.S. government seeks to identify opportunities for cost savings and efficiencies.
As the government seeks opportunities for cost savings and efficiencies, the letter highlights key NIST cybersecurity initiatives, such as the Cybersecurity Framework (CSF), Privacy Framework, and Risk Management Framework, and praises their widespread global adoption. These resources help organizations assess their cybersecurity posture and respond to evolving threats. NIST is also recognized for its leadership in research on emerging areas like artificial intelligence, post-quantum cryptography, and secure communications, all of which are critical to national security.
In addition, the letter emphasizes NIST's strong public-private engagement, notably through the National Cybersecurity Center of Excellence (NCCoE), where industry, government, and academia collaborate to address complex cybersecurity challenges. By leveraging industry standards and commercially available solutions, the NCCoE provides practical guidance that strengthens cybersecurity across sectors. NIST is also key in developing cybersecurity standards for federal agencies, enhancing accountability for software and cloud service providers, and securing federal communications and identity systems.
The letter comes at a time of uncertainty as the Department of Commerce considers cuts that could impact NIST staff members, particularly those focused on AI safety and the CHIPS Act funding distribution office. Such cuts could undermine NIST’s ability to continue its essential work. With the global cybersecurity threat landscape constantly evolving, it is more important than ever that NIST receives the necessary resources to continue its vital mission. From advancing cybersecurity technologies to fostering partnerships with industry to develop world-leading risk management frameworks, NIST is at the forefront of the nation's defense against cyber threats.
Ultimately, the letter urges the U.S. Government to continue to resource NIST at the necessary level to ensure that its expertise remains strong and its cybersecurity initiatives can continue to protect U.S. critical infrastructure and global competitiveness.
Read Next
CyberNext BRU: Harmonizing Cybersecurity Regulations in the EU Single Market
The EU is working to harmonize cybersecurity regulations across its market, seeking to create a robust and unified digital ecosystem. To discuss the challenges rising from differences in regulations join the second annual CyberNext BRU on 5 March.
U.S. Cybersecurity Funding to Latin America: A Critical Investment for Regional and National Stability
The relationship between U.S. foreign policy and cybersecurity in Latin America has long been a critical factor in the region's ability to defend against cyber threats with U.S. funding playing a key role in the region's cybersecurity.
Easterly Reflects on Time at CISA
CISA Director Jen Easterly reflected on the success, experiences, and lessons learned at CISA during the Biden administration and the immediate actions the agency should take to mitigate vulnerabilities and strengthen U.S. cybersecurity.