What is NIST?

• NIST stands for The National Institute of Standards and Technology.

• It is part of U.S. department of commerce and was founded in 1901.

• NIST is one of the nation's oldest physical science laboratories.

• Congress established the agency to remove a major challenge to U.S. industrial competitiveness at the time—a second-rate measurement infrastructure that lagged behind the capabilities of the United Kingdom, Germany, and other economic rivals.

What is NIST Cyber Security Framework?

The Framework is a risk-based approach to managing cybersecurity risk, and is composed of three parts: the Framework Core, the Framework Implementation Tiers, and the Framework Profiles. Each Framework component reinforces the connection between business mission and cybersecurity activities.

• What is Framework core?

  • Function

  • Category

  • Sub category

  • Informative Reference

• What is Framework Implementation tier?

  • Tier 1 : Partial

  • Tier 2: Risk Informed

  • Tier 3: Repeatable

  • Tier 4: Adaptive

• What is Framework Profile?

  • Current state

  • Target State

Why we use this Framework?

• The Framework provides a common language for understanding, managing, and expressing cybersecurity risk to internal and external stakeholders.

• It can be used to help identify and prioritize actions for reducing cybersecurity risk, and it is a tool for aligning policy, business, and technological approaches to managing that risk.

• It can be used to manage cybersecurity risk across entire organizations or it can be focused on the delivery of critical services within an organization.

How to use this framework?

This framework can be use by defining critical infrastructure, Protect attack on them, Identify vulnerabilities, respond to incident and recover to original state.

This course will help you to understand what is this framework, why we use this? and how to use this?