From the course: NIST Cybersecurity Framework (CSF) 2.0 Primer: From Fundamentals to Implementation by Pearson

NIST Cybersecurity Framework 2.0 primer: Introduction

From the course: NIST Cybersecurity Framework (CSF) 2.0 Primer: From Fundamentals to Implementation by Pearson

Start my 1-month free trial Buy for my team

NIST Cybersecurity Framework 2.0 primer: Introduction

“

Hello, I'm Shane Sexton. Welcome to our course on the NIST Cybersecurity Framework, CSF 2.0. In this class, we'll build a solid foundation in this important and widely applicable tool for managing cybersecurity risk. The course comprises four lessons that I hope will strike a balance between useful depth and approachable duration. If we think of the CSF as a map, the goal of the course is to teach you how to read it, not to memorize it one grid square at a time. We'll start with an overview of NIST and NIST's cybersecurity framework, and a breakdown of its three key components, the core, profiles, and tiers. In lessons two and three, we'll examine the CSF core at a moderate level of magnification, offering real-world examples to illustrate its application. A professor once told me that the most important step in starting a new field is learning its vocabulary, And lessons two and three are exactly that, learning the lingo. In our final lesson, we'll shift from knowing to doing. We'll explore how NIST thinks about executing on the CSF, namely profiles and tiers. For some extra flavor and context, we'll explore CSF's relation to other frameworks like NIST's Risk Management Framework, RMF, and ISO 27001. By the end of this course, you'll speak the language, know the lay of the land, and understand how to access and use NIST's freely available supplemental resources. everything needed to build a bridge between an abstract framework and tangible results. This class has no hard prerequisites. Anyone interested in cybersecurity risk management can benefit from it. However, we will approach the content assuming most students have a moderate technical experience. For instance, when we reference security controls like authentication and authorization, we won't define them at length. So those new to IT or cybersecurity may need to to pause and consult with their preferred search engine. Moving on to my favorite topic myself, I've worked in IT and IT training for nearly a decade, always cycling between teaching and doing. And in recent years, I was a senior instructor at a business-to-business IT training company, a security administrator, a network administrator at a Phoenix area MSP. And currently I'm a faculty member at Mesa Community College, where I teach networking and cybersecurity. I've earned numerous certifications, including CCNP Security, Certified Network Defender, CYSA+, Cisco Cyber Ops Associate, CCNA, and a bachelor's degree in technology management. Earlier last year, I published my first Cisco Press book, the CCST Cybersecurity Official Cert Guide with my co-author Raymond Lacoste. And I have three cats, which are my actual favorite topic. All right, let's begin.

Contents