美国国家标准与技术研究院(NIST)近日发布了网络安全框架(CSF)的2.0正式版本，这是2014年该框架发布后十年来首次重大更新。新框架版本极大扩展了适用范围，重点关注治理和供应链问题，并提供了丰富的资源以加速框架实施。NIST正式发布的网络安全框架(CSF)2.0版本比去年9月发布的2.0草案版本更加完善，新版本的重大变化...
The RMF approach can be applied to existing or new systems, any type of system or technology (IoT, control systems, etc.), and any organization size or sector. Tips From the Expert In my experience, here are tips that can help you better apply the NIST Cybersecurity Framework (CSF): ...
The Cybersecurity Framework is not the only NIST framework that relates to this area — NIST has also released a Risk Management Framework (NIST RMF) to provide organizations with guidance on managing risk. The CSF is presented in a 48-page document that details different cybersecurity activities...
CMMC Bundle #2 is based on the NIST 800-53 R5 framework, so it is great if you need to "speak NIST 800-53" or have other US government-based requirements (e.g., FISMA, RMF, HIPAA, etc.) that are based on NIST 800-53. This bundle is aligned with NIST 800-53 (low & moderate...