NIST CSF

This video introduces the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) 2.0 for improving critical infrastructure cybersecurity.

The module covers basic security fundamentals including CIA triad, cybersecurity and information security concepts, drivers of business & environments, and cybersecurity fundamentals.

Covers the three parts of NIST CSF: Framework Core with four areas and five processes, Framework Implementation Tiers, and Framework Profiles.

Focuses on how NIST CSF provides common language to communicate requirements among interdependent stakeholders for critical infrastructure products and services.

Covers the ongoing process of identifying, assessing, and responding to risk, including RMF process, security categorization, control selection, implementation, assessment, and continuous monitoring.

Explores the activities necessary to manage cybersecurity risk associated with external parties and their effect on organizations.

Details the six framework core functions (Govern, Identify, Protect, Detect, Respond and Recover) including categories, subcategories and informative references.

Outlines the steps for comparing current cybersecurity activities with CSF core through profile creation and identifying improvement opportunities.

Describes the process of measuring and assigning values to risk, cost-benefit analysis of risk reduction steps, and managing cybersecurity outcomes.

Summary module covering key framework concepts and implementation tips.