NIST frameworks

ISC Chapter 9 · Area II · Blueprint II.A

After the rulebooks that say what must be protected, the National Institute of Standards and Technology (NIST) offers the playbooks that say how to organize protection. Brightwater's board asks a simple question after a competitor's breach: 'How mature is our cybersecurity, and where should we spend next?' Priya answers with the NIST Cybersecurity Framework, uses the NIST Privacy Framework for the customer data program, and explains why the federal government's control catalog, SP 800-53, matters to PayLoom's government clients. Learn the three parts of each framework and the purpose and audience of SP 800-53, and the exam's questions here become recognition, not memorization.

In this chapter

Three NIST tools and how they fit together
The CSF Core: six functions
CSF Tiers and Organizational Profiles
The NIST Privacy Framework
SP 800-53: purpose, applicability and audience
Inside SP 800-53: families, controls and baselines

This chapter has 6 lessons, 50 practice MCQs with explanations and 20 simulations, plus flashcards and a recall sheet.

What this chapter covers

NIST Cybersecurity Framework
NIST Privacy Framework
purpose and audience of SP 800-53

Chapter 8: Privacy and payment rules: HIPAA, GDPR and PCI DSS · Chapter 10: CIS Controls and COBIT 2019