NIST – NetwerkLABS

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001 NIST CSF Functions and Categories to ISO/IEC 27001 Annex A Controls Identify (ID) Asset Management (ID.AM): A.8 (Asset Management) Business Environment (ID.BE): A.5 (Information Security Policies) Governance (ID.GV): A.6…

Bharath Narayanasamy 27001, NIST

NIST IDENTIFY

NIST – IDENTIFY: Categories and Subcategories

Asset Management (ID.AM): The data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to business objectives and the organization’s risk strategy.

Bharath Narayanasamy NIST, IDENTIFY

NIST

NIST Cybersecurity Framework v1.1: Fundamentals

NIST Functions Identify – Understand what you have and includes activities such as asset management, governance, risk assessment. Protect – Build safeguards and controls to protect what is important to you. Detect – Implement capabilities to…

Bharath Narayanasamy NIST

Threat Detection and Incident Response

Incident Handling Life Cycle

NIST - Security Incident Handling 1. Preparation The preparation phase covers the readiness of an organization against an attack. That means documenting the requirements, defining the policies, incorporating the security controls to monitor like EDR / SIEM /…

Bharath Narayanasamy NIST, Incident Management, dfir, CISO

BLUE TEAM Risk Management INFOSEC Governance and Regulation

Risk Assessment Methodologies

Risk Management Frameworks There are several frameworks for risk assessment. Example methodologies are: NIST SP 800-30: A risk assessment methodology developed by the National Institute of Standards and Technology (NIST). It involves identifying and evaluating risks,…

Bharath Narayanasamy Risk management, CISO, ISO 27001, NIST

BLUE TEAM Risk Management

Risk Management – Terminology

Risk Avoidance Risk Acceptance Risk Reduction Basic Terminology Threat: an intentional or accidental event that can compromise the security of an information system. Examples include hacking, phishing attacks, human error, and natural disasters. Vulnerability: a software,…

Bharath Narayanasamy NIST, Risk management, CISO, ISO 27001