Standards & Frameworks

NIST CSF (Cybersecurity Framework)

The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how private-sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks. It organizes security activities into five functions: Identify, Protect, Detect, Respond, and Recover.

Frequently Asked Questions

What is NIST CSF (Cybersecurity Framework)?

The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how private-sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks. It organizes security activities into five functions: Identify, Protect, Detect, Respond, and Recover.

How is NIST CSF (Cybersecurity Framework) related to MITRE ATT&CK?

NIST CSF (Cybersecurity Framework) and MITRE ATT&CK are both key concepts in threat intelligence. MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat detection, red team exercises, and gap analysis in security programs. The framework covers Enterprise, Mobile, and ICS environments.

Related Terms

← Back to Glossary