The NIST Cybersecurity Framework (CSF) 2.0 organizes cybersecurity activities into six high-level functions that guide organizations in managing and reducing cyber risk. Govern provides strategic oversight, policies, and accountability structures to integrate cybersecurity into organizational decision-making. Identify focuses on understanding assets, business environment, and risk landscape to prioritize protective efforts. Protect involves implementing safeguards such as access controls, encryption, and secure configurations to prevent or limit the impact of cyber events. Detect emphasizes timely discovery of anomalies and potential incidents through monitoring and threat intelligence. Respond outlines processes for containing, mitigating, and communicating during incidents to minimize damage. Finally, Recover addresses restoring capabilities and services after an event to maintain business continuity. Together, these six functions provide a comprehensive, flexible, and risk-based approach to cybersecurity management.
The CISA Principles for the Secure Integration of Artificial Intelligence in Operational Technology provide a comprehensive framework to help critical infrastructure owners and operators securely integrate AI into their OT… Read More »CISA Principles for the Secure Integration of Artificial Intelligence in Operational Technology
NIST SP 800-88 Revision 2, “Guidelines for Media Sanitization,” provides comprehensive instructions on securely removing data from electronic media to render access to the information infeasible, regardless of the effort… Read More »NIST SP 800-88 Rev. 2 Guidelines for Media Sanitization
NIST Internal Report (IR) 8349, titled “Methodology for Characterizing Network Behavior of Internet of Things Devices,” outlines a comprehensive approach to capturing, documenting, and analyzing the network communication behaviors of… Read More »NIST IR 8349 Methodology for Characterizing Network Behavior of Internet of Things Devices
Each mapping is provided online in an Excel file and organized into four categories: CSF 1.1 subcategory mappings, CSF 2.0 subcategory mappings, NIST SP 800-53 control mappings, and NIST critical… Read More »NIST ZTA Component mapping to NIST CSF and Controls
NIST Special Publication 1800-35, “Implementing a Zero Trust Architecture,” provides a comprehensive guide developed by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 24 industry vendors. It demonstrates… Read More »NIST SP 1800-35 Implementing a Zero Trust Architecture
The CISA “Primary Mitigations to Reduce Cyber Threats to Operational Technology” fact sheet outlines five core strategies for critical infrastructure operators to strengthen the cybersecurity of their operational technology (OT)… Read More »CISA Primary Mitigations to Reduce Cyber Threats to Operational Technology
NIST Special Publication 800-82 Revision 3, titled “Guide to Operational Technology (OT) Security,” provides comprehensive guidance on securing operational technology systems, which include a wide range of programmable devices and… Read More »NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security
NIST SP 800-207, titled “Zero Trust Architecture,” is a comprehensive guidance document from the National Institute of Standards and Technology that outlines the principles, components, and strategies for implementing Zero… Read More »NIST SP 800-207 Zero Trust Architecture
Recommendations to secure the administration of IT systems emphasize conducting a thorough risk analysis tailored to the organization’s specific environment, as administrative resources are high-value targets for attackers due to… Read More »ANSSI Recommendations to secure administration of IT systems