2013年4月,美国国家标准技术研究院(NIST)出台了《加强关键基础设施网络安全框架》,以落实第13636号总统行政命令《加强关键基础设施网络安全》的有关要求。该框架旨在帮助运营关键基础设施的公共或私有部门运用风险管理的方法,制定网络安全管理策略,加强关键基础设施安全。我们将该文档的第一部分予以翻译,供读者参考。 In April 2013, the National Institute of Standards and Technology (NIST) introduced the “Strengthening Cybersecurity Framework for Critical Infrastructure” to implement the requirements of Presidential Executive Order No. 13636, “Enhancing Cybersecurity in Critical Infrastructure.” The framework is designed to help public and private sectors that operate critical infrastructure apply risk management methods to develop cybersecurity management strategies and strengthen critical infrastructure security. We will translate the first part of this document for your reference.