A Practical Overview of the NIST Cybersecurity Framework and CIS Controls
Summary
A webinar recap outlines the NIST framework’s five functions—Identify, Protect, Detect, Respond and Recover—and describes CIS Controls as a more digestible way for organizations to prioritize cybersecurity measures.
Key points
- The NIST framework’s five functions are Identify, Protect, Detect, Respond and Recover.
- Asset identification should include users, data, applications and vendors, alongside devices.
- Protection topics include access controls, training, data security, maintenance and physical security.
- Detection covers security events such as newly installed software, failed logins and new devices or users.
- Response planning should define roles, communications and mitigation, and use lessons from past incidents.
- Recovery planning should prioritize data restoration and include tested backups and tabletop exercises.
- The article presents CIS Controls’ three Implementation Groups as a more manageable way to select controls based on business needs and cybersecurity maturity.
Article Details
- Topic
- Overview of the NIST Cybersecurity Framework’s five functions and how CIS Controls v8 can complement its adoption.