From the course: Detection and Response with XDR: Integrated Security Solutions to Combat Emerging Threats

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Describe the basics of the NIST Cybersecurity Framework (CSF)

Describe the basics of the NIST Cybersecurity Framework (CSF)

- So, what is the NIST Cybersecurity Framework? It's a free-to-use cybersecurity risk framework. It was developed by the National Institute of Standards of Technology. It was brought into existence by Executive order 13636 in February of 2013. The current version of the NIST CSF 2.0 was recently released in February of 2024. So, the NIST framework consists of several steps, and we're going to go through those right now. So, first, you need to identify your assets, 'cause you can't protect what you don't know you have. Once you've identified your assets, you're going to put controls in place to protect those assets. Then you're going to have controls that will detect whether or not those assets are being attacked. If you do detect something is going on, then you're going to have some sort of plan and tooling to respond, and after you've responded, then you'll need to recover, you'll need to clean up any damage that's occurred and put things back to the way they were, take any lessons…

Contents