NIST Cybersecurity Framework Fundamentals
In the previous chapter, we learned about what cybersecurity frameworks are and some of their differences. We know that cybersecurity frameworks help align us and our organizations to best practices. Frameworks provide a taxonomy and a common language for complex architecture and terminology.
We were briefly introduced to the NIST Cybersecurity Framework (CSF). The NIST CSF is a robust, agile framework that can be implemented in any organization. As we saw in the last chapter, several organizations have adopted other frameworks only to find out, months or years later, that the chosen framework does not meet their needs.
In this chapter, we will dive into the framework. We will look at the framework’s Core, Tiers, and Profiles. We will discuss what each of these means so that you have a general understanding of the topics being discussed. In later chapters, we will go further into the Core and examine each of its six functions...