On this Risk Chat, Paul and Tal chat with Dr. Ron Ross from NIST about upcoming updates to NIST special publications 800-37 and 800-53. We also discuss why cyber security, privacy and the supply chain of technologies are critical areas to examine for an agency’s ERM program.