EP 62: The NIST Cybersecurity Framework

https://www.yourcyberpath.com/62

In this episode, we cover the importance of the NIST Cybersecurity Framework (NIST CSF) and its use in managing risk as a business process within your organizations. The NIST Cybersecurity Framework was developed by the National Institute of Standards and Technology in collaboration with cybersecurity experts across the world.

The framework is divided into three parts: the Framework Core, the Framework Implementation Tiers, and the Framework Profile. The Framework Core contains the five concurrent and continuous functions performed by a cybersecurity organization: identify, protect, detect, respond, and recover. The Framework Implementation Tiers provides 4 levels of achievement for cybersecurity risk management. The Framework Profiles contains 23 activities and 108 outcomes that can be used to create a profile for your organization to manage its cybersecurity risk.

Kip Boyle and Jason Dion spend this episode providing a great overview of the NIST Cybersecurity Framework and its benefits. The team has recently filmed a long-form course that dives into each and every part of the Framework and teaches you how to use it in your own consulting and risk management efforts. You can find the course on the Your Cyber Path website or at our distribution partner’s website, Udemy.

What You’ll Learn

●       What the NIST Cybersecurity Framework is

●       The benefits of using the NIST Cybersecurity Framework

●       The three parts of the NIST Cybersecurity Framework

●       How to integrate other control methods (ISACA, ISO, RMF) into the NIST Cybersecurity Framework

Relevant Websites For This Episode

●       NIST Cybersecurity Framework course (https://www.yourcyberpath.com/udemy)

●       NIST Cybersecurity Framework (https://www.nist.gov/cyberframework)

●       Your Cyber Path (https://www.yourcyberpath.com)

Tags: NIST CSF, Courses

Other Relevant Episodes

●       Episode 50 – What does it take to lead a cybersecurity program

●       Episode 53 – How to buy cyber insurance for your law practice