What is the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework?

The National Institute of Standards and Technology’s (NIST) Cybersecurity Framework is a set of guidelines designed to help increase the security of organizations’ computer systems. It was developed as part of the White House Executive Order on Cybersecurity, which was issued in 2013 to improve the security of the nation’s cyber infrastructure. The Framework is designed to help organizations identify, assess, and manage their cybersecurity risk in a consistent, repeatable, and cost-effective manner. The Framework is based on existing industry standards and best practices, and is composed of 5 Components: Identify, Protect, Detect, Respond, and Recover. Each Component is further divided into sub-categories, such as Practice, Processes, and Activities. The Framework also includes guidance on Information sharing and a Risk Assessment procedure. The main goal of the Framework is to provide a comprehensive, yet flexible approach to managing cyber risk and helping organizations achieve their desired levels of cybersecurity risk management. The Framework helps organizations assess their current levels of security, identify areas of vulnerability, prioritize and address risks, and measure the effectiveness of their cybersecurity controls. The Framework is voluntary, but it is increasingly becoming a more common way for organizations to protect their data and networks from unauthorized access, theft, and other cyber threats. In Washington, the NIST Cybersecurity Framework is an important tool that organizations can use to help ensure their networks and data are secure.

Related FAQs

What data security laws are in place in the United States?
What should I include in my data security policy?
What is the role of the data protection regulator?
How can I ensure I meet GDPR's requirements?
What is the difference between a data security policy and standard?
What is the EU’s General Data Protection Regulation (GDPR)?
What is the difference between security of data and security in data?
What is considered personal data under data security laws?
What is the Personal Information Protection and Electronic Documents Act (PIPEDA)?
What is data classification?

What is the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework?

Related FAQs

Related Blog Posts