The NIST Cybersecurity Framework (CSF) is a set of standards, guidelines, and best practices designed to help organizations manage and reduce cybersecurity risks.
The CSF 2.0 is organised by six Functions: Govern, Identify, Protect, Detect, Respond and Recover. NIST provide the following definitions for each Function:
- GOVERN (GV): The organization’s cybersecurity risk management strategy, expectations, and policy are established, communicated, and monitored expectations, and policy
- IDENTIFY (ID): The organization’s current cybersecurity risk is understood
- PROTECT (PR): Safeguards to manage the organization’s cybersecurity risk are used
- DETECT (DE): Possible cybersecurity attacks and compromises are found and analyzed
- RESPOND (RS): Actions regarding a detected cybersecurity incident are taken
- RECOVER (RC): Assets and operations affected by a cybersecurity incident are restored