Policymakers in Congress and the administration are to set a performance bar for companies to mitigate threats against critical infrastructure they own and give them the flexibility they say is needed for their operations.
Article Link: CISA, NSA Guidance Tries to Reduce Alternatives for Securing Industrial Control Systems - Nextgov