Framework

OWASP (Open Web Application Security Project) is a non-profit organisation and online community dedicated to providing open-source solutions to help build secure web applications. Further reading OWASP Top Ten

The Standard of Good Practice for Information Security (SOGP), developed by the Information Security Forum (ISF), is a comprehensive information security framework that provides best practices and guidance for managing information security risks and ensuring resilient organisations. SOGP has been developed to be in line with similar industry frameworks. Further reading SOGP - ISF SOGP - Wikipedia

The NIST Cybersecurity Framework (CSF) is a set of standards, guidelines, and best practices designed to help organizations manage and reduce cybersecurity risks. The CSF 2.0 is organised by six Functions: Govern, Identify, Protect, Detect, Respond and Recover. NIST provide the following definitions for each Function: GOVERN (GV): The organization’s cybersecurity risk management strategy, expectations, and policy are established, communicated, and monitored expectations, and policy IDENTIFY (ID): The organization’s current cybersecurity risk is understood PROTECT (PR): Safeguards to manage the organization’s cybersecurity risk are used DETECT (DE): Possible cybersecurity attacks and compromises are found and analyzed RESPOND (RS): Actions regarding a detected cybersecurity incident are taken RECOVER (RC): Assets and operations affected by a cybersecurity incident are restored Related pages NIST Cybersecurity Framework 2.0 was released this year - NIST - 8 Dec 2024