NIST IR 8286 Rev. 1, Integrating Cybersecurity and Enterprise Risk Management (ERM), provides a strategic framework for bridging the gap between technical security operations and high-level business decision-making. It emphasizes… Read More »NIST IR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM) ★★★★★
The NIST Cyber AI Profile offers a structured approach to integrating AI into cybersecurity operations. It provides guidance on leveraging AI for threat detection, risk assessment, and automated response while… Read More »NIST IR 8596 Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile): NIST Community Profile ★★★★★
NIST IR 8286A Rev. 1, Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management, serves as a specialized companion to the main framework by providing deep-dive methodologies for the initial… Read More »NIST IR 8286A Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management ★★★★★
NIST SP 800-88 Revision 2, “Guidelines for Media Sanitization,” provides comprehensive instructions on securely removing data from electronic media to render access to the information infeasible, regardless of the effort… Read More »NIST SP 800-88 Rev. 2 Guidelines for Media Sanitization
NIST Internal Report (IR) 8349, titled “Methodology for Characterizing Network Behavior of Internet of Things Devices,” outlines a comprehensive approach to capturing, documenting, and analyzing the network communication behaviors of… Read More »NIST IR 8349 Methodology for Characterizing Network Behavior of Internet of Things Devices
Each mapping is provided online in an Excel file and organized into four categories: CSF 1.1 subcategory mappings, CSF 2.0 subcategory mappings, NIST SP 800-53 control mappings, and NIST critical… Read More »NIST ZTA Component mapping to NIST CSF and Controls
NIST Special Publication 800-63-4, Digital Identity Guidelines, provides comprehensive process and technical requirements for managing digital identity assurance levels in identity proofing, authentication, and federation. These guidelines address modern digital… Read More »NIST SP 800-63-4 Digital Identity Guidelines
NIST Special Publication 1800-35, “Implementing a Zero Trust Architecture,” provides a comprehensive guide developed by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 24 industry vendors. It demonstrates… Read More »NIST SP 1800-35 Implementing a Zero Trust Architecture
NIST SP 800-18 Revision 2, “Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems,” provides a structured framework for creating comprehensive security plans for federal information systems,… Read More »NIST SP 800-18 Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
The content of the “NIST CSF 2.0 to ISO 27002:2022 Annexure A Mapping” post by Razilio details their effort to create a comprehensive mapping between the updated NIST Cybersecurity Framework… Read More »NIST CSF 2.0 Mapping to ISO 27002:2022