NIST Special Publication 800-63-4, Digital Identity Guidelines, provides comprehensive process and technical requirements for managing digital identity assurance levels in identity proofing, authentication, and federation. These guidelines address modern digital… Read More »NIST SP 800-63-4 Digital Identity Guidelines
CIS Controls v8.1 introduced significant updates to align with NIST Cybersecurity Framework (CSF) 2.0, including the addition of a dedicated “Governance” security function to address organizational oversight and compliance requirements.… Read More »CIS Controls v8.1 Mapping to NIST CSF 2.0
NIST Special Publication 1800-35, “Implementing a Zero Trust Architecture,” provides a comprehensive guide developed by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 24 industry vendors. It demonstrates… Read More »NIST SP 1800-35 Implementing a Zero Trust Architecture
NIST SP 800-18 Revision 2, “Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems,” provides a structured framework for creating comprehensive security plans for federal information systems,… Read More »NIST SP 800-18 Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
The CISA “Primary Mitigations to Reduce Cyber Threats to Operational Technology” fact sheet outlines five core strategies for critical infrastructure operators to strengthen the cybersecurity of their operational technology (OT)… Read More »CISA Primary Mitigations to Reduce Cyber Threats to Operational Technology
The “Top Threats to Cloud Computing 2025” report highlights a rapidly evolving threat landscape driven by both technological advances and persistent human factors. Key risks include data breaches, often resulting… Read More »CSA Top Threats to Cloud Computing 2025
The OWASP Application Security Verification Standard (ASVS) is a comprehensive framework that defines security requirements for designing, developing, and testing web applications and APIs. It is organized into 14 chapters,… Read More »OWASP Application Security Verification Standard (ASVS) 5.0 ★★★★★
The content of the “NIST CSF 2.0 to ISO 27002:2022 Annexure A Mapping” post by Razilio details their effort to create a comprehensive mapping between the updated NIST Cybersecurity Framework… Read More »NIST CSF 2.0 Mapping to ISO 27002:2022
The CRI Profile v2.1 is a cybersecurity framework developed by the Cyber Risk Institute specifically for the financial sector, aimed at helping institutions efficiently manage and assess cyber risk while… Read More »CRI Cyber Risk Institute Profile for Financial Sector v2.1 ★★★★★
NIST SP 800-61 Revision 3, titled Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile, provides updated guidance to help organizations integrate incident response into their… Read More »NIST SP 800-61 Rev. 3 Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile