They now need to be made enforceable, whether by government requiring them in government contracts, or indirectly by insurers excluding coverage if they are not met.
Re:Stupid Security Things
by pionar on Friday October 28, 2022 @10:07AM
(#33371552)
No, because what will happen is that the standards won't be updated for 10 years, and they'll be outdated, just like all "enforceable" standards created by the US government.
https://pages.nist.gov/800-63-3/
They now need to be made enforceable, whether by government requiring them in government contracts, or indirectly by insurers excluding coverage if they are not met.