Call us now:
Thank you Ted Dziekanowski for posting. If the DoD decides to move forward and adopt NIST CSF as a tool to help manage cyber risk. We cannot forget that you will also have to adopt an approach for cybersecuirty risk management, as you cannot economically secure everything.
U.S and EU Cyber regulation implements cybersecurity risk management. Cybersecurity risk management requires a risk management framework and cyber standard for risk mitigation. The NIST CSF, or another cybersecuirty standard, could be used as a risk control standard within a CSF profile.
A CSF profile is a cybersecurity profile that is developed with a Risk Management Framework to create a cybersecurity profile based upon mission and business objectives. Taking for example NIST CSF and ‘tailoring’ it to meet business and mission objectives to mitigate risk.
We wrote in our March 2023 paper, a CSF profile requires a risk culture, a risk framework, and a cybersecurity standard. That can change as business and mission objectives change. A CSF profile could be used as a contractual tool, tailored to specific circumstances and to deliver cybersecurity risk management regulation.
#cybersecurity #cyberriskmanagement #csfprofile #nistcsf #cyberegulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7066300725152096256