Identify, Protect, Detect, Respond, and Recover
In the previous chapter, we had an important (and hopefully good) introduction to the NIST Framework. Let’s talk more about the most important points.
Remember from the previous chapter the most important points related to NIST?
Identify
NIST describes the Identify function as “developing the corporate knowledge to manage cybersecurity risk to systems, assets, data, and capabilities.” As a cybersecurity stakeholder, you may utilize this function to work on creating the groundwork in your business for future successful usage of the framework. The emphasis of Identify is on the company and how it relates to cybersecurity risk, particularly when resources are limited. Some of the result categories linked with this function are as follows:
- Asset Management
- Business Environment
- Governance
- Risk Management
- Strategy for Risk Management
The significance of the Identify function is obvious...