NIST CSF profile provides organisations with a framework for the oversight and assurance of cybersecurity controls.

← Back to Blog

NIST CSF profile provides organisations with a framework for the oversight and assurance of cybersecurity controls. CSF profiles provide many advantages over traditional NIST cybersecurity frameworks such as NIST SP 800-171 as they capture practices associated Governance, Strategy, the Business Environment and Risk. They providing an integrated assessment of cybersecurity risk management in line with Business and Mission objectives.

CISA have created industry specific CSF profiles for various industries including the Defense Industry Base (DIB). That raises the question of should it be used by the DoD to provide cybersecurity oversight and assurance of the global DIB?(https://lnkd.in/dMB4bsmU)

The most important risk management standard current I believe in the US is NIST SP 800-37R2, the Risk Management Framework. As it is recommended by FISMA for the assessment of risk. Used in line with cybersecurity control frameworks such as those captured by CSF profiles.

#cyberlegal‚ #legal‚ #cybersecurity‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #cyberregulation‚ #ransomeware‚ #nist‚ #cyberinsurance‚ #esg‚ #cybergovernance #csf #csfprofiles

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6892005549253476352