NIST CSF Function ID
The Identify (ID) Function is the foundational diagnostic pillar of the NIST Cybersecurity Framework (CSF) 2.0, operating as the organizational “inventory and assessment” engine since its inception to provide a unified understanding of the digital landscape. The ID Function supports both technical operators and risk managers by offering a structured approach to asset management, risk assessment, and improvement to reduce the blind spots in an organization’s defense and to help make the enterprise the safest place to manage critical data and systems. Acting as the framework’s “situational awareness” center, the ID Function monitors the current state of all hardware, software, and data assets, issues detailed risk profiles based on identified vulnerabilities and threats, coordinates with the Govern function to prioritize remediation, and serves as the single point of truth for the organization’s cybersecurity posture, ensuring a coordinated and resilient baseline for all subsequent security actions.
The HITRUST Cybersecurity Framework (CSF) is a comprehensive, certifiable security and privacy framework designed to help organizations manage cyber risk and meet regulatory compliance requirements effectively. It harmonizes and integrates… Read More »HITRUST Cybersecurity Framework CSF
The MITRE ATT&CK® framework is a globally recognized, continuously updated knowledge base that catalogs the tactics, techniques, and procedures (TTPs) used by cyber adversaries, based on real-world observations. Organized as a… Read More »MITRE Att&Ck® version 16.1
CIS Critical Security Controls v8 (CIS CSC v8) is a comprehensive cybersecurity framework developed by the Center for Internet Security to help organizations defend against modern cyber threats. Version 8… Read More »CIS Critical Security Controls Version 8 ★★★★★
The Cloud Security Alliance’s (CSA) Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™) is an emerging, cloud-centric threat matrix designed to address the unique and rapidly evolving security risks in cloud… Read More »CSA Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™): An Emerging Threat Matrix for Industry Collaboration
The FIRST CVSS Calculator is an interactive tool provided by the Forum of Incident Response and Security Teams (FIRST) that enables users to assess the severity of software vulnerabilities using… Read More »FIRST Common Vulnerability Scoring System (CVSS) Calculator Version 4.0
NIST SP 800-221 serves as the critical functional bridge between enterprise-level strategy and technical delivery, focusing on the Enterprise Impact of Information and Communications Technology (ICT) Risk. It moves beyond… Read More »NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio
The CISA #StopRansomware Guide is a comprehensive, one-stop resource designed to help organizations prevent, detect, respond to, and recover from ransomware and data extortion incidents. Developed collaboratively by CISA, the… Read More »CISA Stop Ransomware Guide ★★★★★
ISO/IEC 27005 is an international standard that provides comprehensive guidelines for information security risk management, forming a key part of the ISO/IEC 27000 family of standards. It outlines a structured… Read More »ISO/IEC 27005:2022 Information security, cybersecurity and privacy protection — Guidance on managing information security risks ★★★★★
The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8
The latest version of ISO/IEC 27002 was published on February 15, 2022. This 2022 revision replaced the previous 2013 edition and introduced significant changes including a reduction in the number… Read More »ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls ★★★★★