NIST recently released Draft NIST Internal Report (NIST IR) 8432, Cybersecurity of Genomic Data for comment.
Genomic data has enabled the rapid growth of the U.S. bioeconomy and is valuable to the individual, industry, and government due to intrinsic properties that, in combination, make it different from other types of high-value data which possess only a subset of these properties. The characteristics of genomic data compared to other high value datasets raises some correspondingly unique cybersecurity and privacy challenges that are inadequately addressed with current policies, guidance, and technical controls.
This report describes current practices in risk management, cybersecurity, and privacy management for protecting genomic data, as well as the associated challenges and concerns. It identifies gaps in protection practices across the genomic data lifecycle and proposes solutions to address real-life use cases occurring at various stages of the genomic data lifecycle. This report also is intended to provide areas for regulatory/policy enactment or further research.
Submit Your CommentsThe public comment period closes at 11:59 PM ET on April 1, 2023. Please email all draft comments to [email protected]. We encourage you to use this comment template (https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fcsrc.nist.gov%2Fcsrc%2Fmedia%2FPublications%2Fnistir%2F8432-ipd%2Fdraft%2Fdocuments%2Fnistir-8432-ipd-comment-template.xlsx&wdOrigin=BROWSELINK) when preparing and submitting your comments.