The NIST Cybersecurity Framework

The NIST Cybersecurity Framework was designed to help cybersecurity professionals better assess and improve their capabilities to identify, protect, detect, respond, and recover from a cyber attack. This framework is based on the following five domains.

Identify

The goal here is to understand our environment, including our assets, the business environment, governance, the risk management strategy, and more.

As you might have noticed, asset identification is key in regard to cybersecurity. However, I would like to highlight that while this might sound obvious, many companies have suffered attacks due to a lack of understanding and awareness of their own infrastructure, systems, and devices.

Protect

Now that you know your environment, it's time to protect it. The framework proposes the following mechanisms (these are self-explanatory, so there is no need to deep dive into them):

• Access control
• Awareness and training
...