The NIST Cybersecurity Framework (CSF) 2.0 organizes cybersecurity activities into six high-level functions that guide organizations in managing and reducing cyber risk. Govern provides strategic oversight, policies, and accountability structures to integrate cybersecurity into organizational decision-making. Identify focuses on understanding assets, business environment, and risk landscape to prioritize protective efforts. Protect involves implementing safeguards such as access controls, encryption, and secure configurations to prevent or limit the impact of cyber events. Detect emphasizes timely discovery of anomalies and potential incidents through monitoring and threat intelligence. Respond outlines processes for containing, mitigating, and communicating during incidents to minimize damage. Finally, Recover addresses restoring capabilities and services after an event to maintain business continuity. Together, these six functions provide a comprehensive, flexible, and risk-based approach to cybersecurity management.
NIST Special Publication 1800-35, “Implementing a Zero Trust Architecture,” provides a comprehensive guide developed by the National Cybersecurity Center of Excellence (NCCoE) in collaboration with 24 industry vendors. It demonstrates… Read More »NIST SP 1800-35 Implementing a Zero Trust Architecture
NIST SP 800-18 Revision 2, “Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems,” provides a structured framework for creating comprehensive security plans for federal information systems,… Read More »NIST SP 800-18 Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
The CISA “Primary Mitigations to Reduce Cyber Threats to Operational Technology” fact sheet outlines five core strategies for critical infrastructure operators to strengthen the cybersecurity of their operational technology (OT)… Read More »CISA Primary Mitigations to Reduce Cyber Threats to Operational Technology
The content of the “NIST CSF 2.0 to ISO 27002:2022 Annexure A Mapping” post by Razilio details their effort to create a comprehensive mapping between the updated NIST Cybersecurity Framework… Read More »NIST CSF 2.0 Mapping to ISO 27002:2022
The page titled “Cyber Attacks and Remediation: Remediation Active Directory Tier 0” on cyber.gouv.fr provides detailed guidance on how to respond to and remediate cyber attacks targeting the highest privilege… Read More »ANSSI Cyber attacks and remediation : Remediation of active directory tier 0
The ANSSI publication “Cyber attacks and remediation: The keys to decision-making” provides a comprehensive conceptual framework for managing remediation operations after a major cyber incident compromising an information system. It… Read More »ANSSI Cyber attacks and remediation : The keys to decision-making
The ANSSI document “Cyber attacks and remediation: Managing the remediation” provides a comprehensive framework for regaining control of a compromised information system following a major cyber incident. It defines remediation… Read More »ANSSI Cyber attacks and remediation : Managing the remediation
NIST SP 800-61 Revision 3, titled Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile, provides updated guidance to help organizations integrate incident response into their… Read More »NIST SP 800-61 Rev. 3 Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile
The ANSSI Cyber Threat Overview provides a comprehensive analysis of the prevailing cyber threats, focusing on the motivations, capabilities, and methods of attackers targeting critical information systems and the broader… Read More »ANSSI Cyber threat overview 2024 (in 2025)
NIST IR 8286C Rev. 1, Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight, completes the risk management cycle by detailing how prioritized risks are formally communicated and acted… Read More »NIST IR 8286C Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight