NIST CSF Function ID
The Identify (ID) Function is the foundational diagnostic pillar of the NIST Cybersecurity Framework (CSF) 2.0, operating as the organizational “inventory and assessment” engine since its inception to provide a unified understanding of the digital landscape. The ID Function supports both technical operators and risk managers by offering a structured approach to asset management, risk assessment, and improvement to reduce the blind spots in an organization’s defense and to help make the enterprise the safest place to manage critical data and systems. Acting as the framework’s “situational awareness” center, the ID Function monitors the current state of all hardware, software, and data assets, issues detailed risk profiles based on identified vulnerabilities and threats, coordinates with the Govern function to prioritize remediation, and serves as the single point of truth for the organization’s cybersecurity posture, ensuring a coordinated and resilient baseline for all subsequent security actions.
The CSA AI Controls Matrix (AICM) is a comprehensive framework designed to help organizations assess and manage the risks associated with artificial intelligence (AI) systems. It outlines a set of… Read More »CSA AI Controls Matrix (AICM) ★★★★★
The ComplianceForge Secure Controls Framework (SCF) Control Mapping is a comprehensive resource designed to help organizations efficiently align their cybersecurity and privacy controls with multiple regulatory, statutory, and contractual requirements.… Read More »COMPLIANCE FORGE Secure Controls Framework (SCF) Control Mapping ★★★★★
The Cloud Security Alliance’s (CSA) Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™) is an emerging, cloud-centric threat matrix designed to address the unique and rapidly evolving security risks in cloud… Read More »CSA Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™): An Emerging Threat Matrix for Industry Collaboration
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
The latest version of ISO/IEC 27002 was published on February 15, 2022. This 2022 revision replaced the previous 2013 edition and introduced significant changes including a reduction in the number… Read More »ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls ★★★★★
The Cloud Security Alliance Cloud Controls Matrix (CSA CCM) is a comprehensive cybersecurity control framework specifically designed for cloud computing environments. It consists of 197 control objectives organized into 17… Read More »CSA Cloud Controls Matrix (CCM) v4 ★★★★★
NIST Special Publication 800-53 (NIST SP 800-53) provides a comprehensive catalog of security and privacy controls designed to protect federal information systems and organizations from a wide range of risks. The… Read More »NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations