Tag
NIST CSF
6 articles
Compliance frameworks
Mapping NIST CSF to ISO 27001
How NIST CSF 2.0 functions map to ISO 27001:2022 clauses and Annex A controls, where the mapping breaks down, and how one evidence set serves both.
6 min read
Compliance frameworks
NIST CSF implementation tiers explained
What the four NIST CSF tiers describe, from Partial to Adaptive, why they are not maturity scores, and how to choose and evidence a target tier that fits.
6 min read
Compliance frameworks
Building NIST CSF current and target profiles
How to build NIST CSF 2.0 current and target profiles: scoping, describing current practice with evidence, setting targets by risk, and planning gaps.
6 min read
Compliance frameworks
What the Govern function added in NIST CSF 2.0
Which parts of the NIST CSF 2.0 Govern function moved from version 1.1, which are new, and what each of the six Govern categories asks you to produce.
6 min read
Risk and vendors
Writing a risk appetite statement
How to write a security risk appetite statement leadership will approve: appetite vs tolerance, a structure by category, sample wording, and common faults.
6 min read
Compliance frameworks
NIST CSF 2.0 and its six functions
What NIST CSF 2.0 contains: the six functions and their categories, how subcategories are written, where profiles and tiers fit, and what it is not.
6 min read