Security frameworks
One way to help you meet all of these bars is to use applicable security frameworks to guide your security efforts. Some of these are required to meet certification standards while some are recommended best practices. Let’s look at some of the best to keep in mind.
NIST CSF
In February 2004, the U.S. National Institute of Standards and Technology (NIST) published version 2.020 of its Cybersecurity framework (CSF) in support of the USA’s National Cybersecurity Strategy,21 published in 2023.
NIST is neither a regulatory agency nor a certifying body, so the CSF is a guide for both public and private bodies on best practices for organizing and implementing security policies.
Perhaps the best way to get started is...
