The NIST Cybersecurity Framework (CSF) 2.0
National Institute of Standards and Technology
The framework most security programs are now measured against, built around six functions: govern, identify, protect, detect, respond and recover. It explains how to build an organizational profile, set target outcomes, and use tiers to describe how mature your practices actually are.
Loading the book...
Keep reading
-
Next in this topic
Guide for Conducting Risk AssessmentsA step by step method for assessing risk, covering how to prepare an assessment, identify threat sources and events, determine likelihood and impact, and communicate results so decisions actually get made. Includes the full set of tables and rating scales the process depends on.
Verified PDF · Secure download - Risk Management Framework for Information Systems and Organizations
The seven step process for managing security and privacy risk across a system life cycle: prepare, categorize, select, implement, assess, authorize and monitor. It also shows how the framework connects to the Cybersecurity Framework and to supply chain risk management.
Verified PDF · Secure download - Cybersecurity: Our Digital Anchor
A policy oriented report that maps cyber security as a whole system, covering the threat landscape, digital sovereignty, standards and certification, and the research priorities that shape security governance. Useful for understanding how risk is managed at institutional scale rather than at the level of a single machine.
Verified PDF · Secure download - Guide to Integrating Forensic Techniques into Incident Response
A practical forensics manual built on a four phase process of collection, examination, analysis and reporting, applied to data files, operating systems, network traffic and applications. It also covers evidence integrity, tool selection and the policy questions that need answers before an incident starts.
Verified PDF · Secure download - Incident Response Recommendations for Cybersecurity Risk Management
A modern take on incident handling that treats response as part of continuous risk management rather than a separate playbook. It maps the work onto the six framework functions and lists the outcomes an organization should be able to demonstrate before, during and after an incident.
Verified PDF · Secure download
