NIST Cybersecurity and Risk Management Framework

Preface – Overview of the NIST Framework

• Background on the Framework
• Framework Based on Risk Management
• The Framework Core
• Framework Implementation Tiers
• Framework Profile
• Other Aspects of the Framework Document
• Recent Developments at Nist

Cybersecurity Risk Planning and Management

• Introduction
• What Is Cybersecurity Risk Management?
• Asset Management
• Governance
• Risk Assessment and Management
• Summary
• Essential Reading on Cybersecurity Risk Management

User and Network Infrastructure Planning and Management

• Introduction
• Infrastructure Planning and Management Is All About Protection, Where the Rubber Meets the Road
• Awareness and Training
• Data Security
• Information Protection Processes and Procedures
• Maintenance
• Protective Technology
• Summary
• Essential Reading on Network Management

Tools and Techniques for Detecting Cyber Incidents

• Introduction
• What Is an Incident?
• Detect
• Summary
• Essential Reading for Tools and Techniques for Detecting a Cyberattack

Developing a Continuity of Operations Plan

• Introduction
• One Size Does Not Fit All
• Response
• Analysis
• Mitigation
• Recover
• Summary
• Essential Reading for Developing a Continuity of Operations Plan

Supply Chain Risk Management

• Introduction
• Nist Special Publication 800-161
• Software Bill of Materials
• Nist Revised Framework Incorporates Major Supply Chain Category
• Summary
• Essential Reading for Supply Chain Risk Management

Manufacturing and Industrial Control Systems Security

• Essential Reading on Manufacturing and Industrial Control Security

Appendix A: Helpful Advice for Small Organizatio...plement Some of the Book’s Recommendations

Appendix B: Critical Security Controls Version 8.0 Mapped to NIST CSF v1.1