nist cybersecurity framework

IDENTIFY

The 1st out of 5, this Core Function of the NIST CSF encourages companies to identify the assets they own that might appeal to hackers. The main activity categories include: asset management, business environment, governance, risk assessment, and risk management.

PROTECT

The 2nd out of 5, this Core Function of the NIST CSF encourages companies to assess their cybersecurity processes to ensure they are robust enough to protect company assets. The main activity categories include: access control, awareness and training, data security, information protection, maintenance, and protective technology.

DETECT

The 3rd out of 5, this Core Function of the NIST CSF encourages companies to assess their cybersecurity processes to ensure they are robust enough to detect threats. The main activity categories include: anomalies and events, continuous monitoring, and detection processes.

RESPOND

The 4th out of 5, this Core Function of the NIST CSF encourages companies to assess their cybersecurity processes to ensure they a response plan in the event of an attack. The main activity categories include: planning response, communications, analysis, mitigation, and improvements.

RECOVER

The 5th out of 5, this Core Function of the NIST CSF encourages companies to assess their cybersecurity processes to ensure they include a plan to repair the damage caused by a cyber attack. The main activity categories include: recovery planning, improvements, and communication.

NIST Cybersecurity Framework (NIST CSF)

A helpful framework aimed at reducing and better managing cybersecurity risks; for improving cybersecurity that involves five core functions. These core functions are activities performed "concurrently and continuously to form an operational culture that addresses the dynamic cybersecurity risk" (NIST, 2014, pg. 8).

NIST CSF Core Functions

The five concurrent and continuous Functions that serve as a foundation of the NIST CSF and include: Identify, Protect, Detect, Respond, and Recover. When considered together, these Functions provide a high-level, strategic view of the lifecycle of an organization's management of cybersecurity risk.