NIST Cybersecurity Framework

A set of comprehensive guidelines and best practices developed by the National Institute of Standards and Technology to manage cybersecurity risk.

Core Functions

1. Identify - Understand the organizational context, assets, and risks

2. Protect - Implement safeguards to ensure service delivery

3. Detect - Develop activities to identify cybersecurity events

4. Respond - Take action regarding detected incidents

5. Recover - Restore capabilities after a cybersecurity event.

Implementation Tiers

• Tier 1: Partial

• Tier 2: Risk-Informed

• Tier 3: Repeatable

• Tier 4: Adaptive