NIST vs NSA

The House has approved legislation to reauthorize the functions of the National Institute of Standards and Technology that strips the National Security Agency from the list of agencies consulted in developing information system standards, Inside Cybersecurity reports today:

The move is another example of the fallout from the Snowden leaks and revelations about NSA cyber spying. The proposal, if approved by the Senate, would have implications for future NIST processes in developing data-security standards.

The House on Tuesday approved by voice vote H.R. 5035 to grant a one-year reauthorization for NIST funding and activities. Section 12 of the bill would modify existing law by eliminating NSA from the consultation process that NIST must follow in developing information system standards. The bill would preserve the requirement that NIST consult with the White House Office of Management and Budget and the Energy and Defense departments.

NIST has been a key player in the Obama administration's efforts on cybersecurity, having managed the drafting of a framework of voluntary standards for industry released in February. Those standards are slated for updates which would have to follow the revised consultation process if approved by the full Congress.