NIST CSF Function ID
The Identify (ID) Function is the foundational diagnostic pillar of the NIST Cybersecurity Framework (CSF) 2.0, operating as the organizational “inventory and assessment” engine since its inception to provide a unified understanding of the digital landscape. The ID Function supports both technical operators and risk managers by offering a structured approach to asset management, risk assessment, and improvement to reduce the blind spots in an organization’s defense and to help make the enterprise the safest place to manage critical data and systems. Acting as the framework’s “situational awareness” center, the ID Function monitors the current state of all hardware, software, and data assets, issues detailed risk profiles based on identified vulnerabilities and threats, coordinates with the Govern function to prioritize remediation, and serves as the single point of truth for the organization’s cybersecurity posture, ensuring a coordinated and resilient baseline for all subsequent security actions.
The CRI Profile v2.1 is a cybersecurity framework developed by the Cyber Risk Institute specifically for the financial sector, aimed at helping institutions efficiently manage and assess cyber risk while… Read More »CRI Cyber Risk Institute Profile for Financial Sector v2.1 ★★★★★
The First EPSS Calculator is an open-source tool designed to fetch and display the Exploit Prediction Scoring System (EPSS) score for one or multiple CVEs (Common Vulnerabilities and Exposures). The calculator… Read More »FIRST Exploit Prediction Scoring System (EPSS) Calculator
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is a comprehensive, publicly available knowledge base and framework that documents the tactics, techniques, and case studies of adversarial attacks targeting artificial… Read More »MITRE ATLAS version 4.8.0
NIST IR 8286C Rev. 1, Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight, completes the risk management cycle by detailing how prioritized risks are formally communicated and acted… Read More »NIST IR 8286C Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight
NIST IR 8286D, Using Business Impact Analysis to Inform Risk Prioritization and Response, bridges the gap between traditional Business Impact Analysis (BIA) and modern cybersecurity risk management. It provides a… Read More »NIST IR 8286D Using Business Impact Analysis to Inform Risk Prioritization and Response
The FAIR (Factor Analysis of Information Risk) taxonomy for cyber risk scenarios provides a rigorous analytical framework that decomposes risk into two fundamental pillars: Loss Event Frequency and Loss Magnitude.… Read More »FAIR Taxonomy for Cyber Risk Scenarios ★★★★★
NIST IR 8286B, Prioritizing Cybersecurity Risk for Enterprise Risk Management, focuses on the critical transition from risk estimation to actionable decision-making. It provides guidance on how to evaluate and rank… Read More »NIST IR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management
The “Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile” is a NIST publication that provides organizations with a practical guide to managing ransomware risks using the updated NIST Cybersecurity… Read More »NIST IR 8374 Rev. 1 Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile
The ComplianceForge Secure Controls Framework (SCF) Control Mapping is a comprehensive resource designed to help organizations efficiently align their cybersecurity and privacy controls with multiple regulatory, statutory, and contractual requirements.… Read More »COMPLIANCE FORGE Secure Controls Framework (SCF) Control Mapping ★★★★★
The MITRE ATT&CK® framework is a globally recognized, continuously updated knowledge base that catalogs the tactics, techniques, and procedures (TTPs) used by cyber adversaries, based on real-world observations. Organized as a… Read More »MITRE Att&Ck® version 16.1