EP 62: The NIST Cybersecurity Framework

EP 62: The NIST Cybersecurity Framework

Author: Kip Boyle January 21, 2022 Duration: 31:34

https://www.yourcyberpath.com/62

In this episode, we cover the importance of the NIST Cybersecurity Framework (NIST CSF) and its use in managing risk as a business process within your organizations. The NIST Cybersecurity Framework was developed by the National Institute of Standards and Technology in collaboration with cybersecurity experts across the world.

The framework is divided into three parts: the Framework Core, the Framework Implementation Tiers, and the Framework Profile. The Framework Core contains the five concurrent and continuous functions performed by a cybersecurity organization: identify, protect, detect, respond, and recover. The Framework Implementation Tiers provides 4 levels of achievement for cybersecurity risk management. The Framework Profiles contains 23 activities and 108 outcomes that can be used to create a profile for your organization to manage its cybersecurity risk.

Kip Boyle and Jason Dion spend this episode providing a great overview of the NIST Cybersecurity Framework and its benefits. The team has recently filmed a long-form course that dives into each and every part of the Framework and teaches you how to use it in your own consulting and risk management efforts. You can find the course on the Your Cyber Path website or at our distribution partner’s website, Udemy.

What You’ll Learn

●       What the NIST Cybersecurity Framework is

●       The benefits of using the NIST Cybersecurity Framework

●       The three parts of the NIST Cybersecurity Framework

●       How to integrate other control methods (ISACA, ISO, RMF) into the NIST Cybersecurity Framework

Relevant Websites For This Episode

●       NIST Cybersecurity Framework course (https://www.yourcyberpath.com/udemy)

●       NIST Cybersecurity Framework (https://www.nist.gov/cyberframework)

●       Your Cyber Path (https://www.yourcyberpath.com)

Tags: NIST CSF, Courses

Other Relevant Episodes

●       Episode 50 – What does it take to lead a cybersecurity program

●       Episode 53 – How to buy cyber insurance for your law practice


Navigating a career in cybersecurity can feel like a maze without a clear map. Your Cyber Path: How to Get Your Dream Cybersecurity Job, hosted by Kip Boyle, cuts through the noise by focusing on the perspective of the people who actually make hiring decisions. This isn't just generic advice; it's a direct line to understanding what employers are truly looking for in candidates, from entry-level roles to advanced positions. Each episode delves into the practical, often unspoken, steps needed to build your skills, craft your resume, and ace interviews in this competitive field. You'll hear concrete strategies for bridging the gap between where you are now and that ideal job, all framed within the broader contexts of business, technology, and personal growth. Tune into this podcast for honest conversations that translate complex career pathways into actionable plans, helping you move forward with confidence. Whether you're considering a pivot or aiming to advance, the guidance here is rooted in real-world hiring dynamics, making it a valuable resource for anyone serious about building a future in cybersecurity.
Author: Language: English Episodes: 100

Your Cyber Path: How to Get Your Dream Cybersecurity Job
Podcast Episodes
EP 116 - What's next after season 2? [not-audio_url] [/not-audio_url]

Duration: 36:49
What's next after season 2? About this Episode In the grand wrap-up of season two of the podcast 'Your Cyber Path', hosts Kip Boyle and Jason Dion reflect on their four-year podcast journey. They also reveal that for the…
EP 115 - SDP 10: Separation of Privileges [not-audio_url] [/not-audio_url]

Duration: 15:46
SDP 10: Separation of Privileges About this Episode In this episode of the Your CyberPath podcast, Kip Boyle and Jason Dion delve into the concept of the separation of privilege as a vital component of their series on se…
EP 114 - NIST CSF Versus The Top 18 [not-audio_url] [/not-audio_url]

Duration: 50:07
About this episode In this episode, Kip Boyle and Jason Dion discuss the importance of cybersecurity in the current digital landscape and focus on comparing two different standards: The NIST Cybersecurity Framework and t…
EP 113 - SDP 9 Least common Mechanism [not-audio_url] [/not-audio_url]

Duration: 13:43
In this episode, Kip and Jason cover the Security Design Principle of “Least Common Mechanism”. The Lease Common Mechanism is the ninth security design principle and focuses on how you can best protect older, legacy syst…
EP 112 - Listeners' Questions [not-audio_url] [/not-audio_url]

Duration: 1:07:16
https://www.yourcyberpath.com/112/ In this episode, Kip and Jason jump into answer questions directly from our listeners! We share valuable advice and insights into starting and advancing in the cybersecurity field by ad…
EP 111:  SDP 8 Open Design [not-audio_url] [/not-audio_url]

Duration: 21:34
https://www.yourcyberpath.com/111/ In this episode, Kip and Jason delve into the specific security design principle of Open Design. Open Design does not equate to open-source software but refers to transparency in reveal…
EP 110: Am I too old to work in Cybersecurity [not-audio_url] [/not-audio_url]

Duration: 34:04
https://www.yourcyberpath.com/110/ In this episode, hosts Kip Boyle and Jason Dion discuss the topic of ageism in cybersecurity careers. They address a listener's question about whether it is too late for a career change…
EP 109: SDP 7: Complete Mediation [not-audio_url] [/not-audio_url]

Duration: 20:42
https://www.yourcyberpath.com/109/ In this episode, we are returning to the Security Design Principles series, this time with Complete Mediation. Complete mediation means the system checks the user trying to access a fil…
Episode 108: Self-Care [not-audio_url] [/not-audio_url]

Duration: 46:27
https://www.yourcyberpath.com/108/ In this episode, we discuss a critically important topic which is Selfcare. Cybersecurity is a great career, however it is not 100% stress free, burning out and working yourself into ob…
EP 107: SDP 6: Fail-safe Defaults [not-audio_url] [/not-audio_url]

Duration: 26:55
https://www.yourcyberpath.com/107/ In this episode, we go back to the Security Design Principles series, this time we are discussing Failsafe Defaults. Failsafe defaults simply means that the default condition of a syste…