Introduction
NIST Cybersecurity framework was instituted to help deal with
cybersecurity threats and how to deal with such attacks. cybersecurity
framework proposed by National Institute of Standards and Technology
(NIST) have its impact to the industry. These includes the core of the
framework which focuses on the vulnerability scans and detection of
malicious code considering various functions which include identity,
protect, and detect, guidelines on using the framework, and its advantages
in various industry sectors including legislation, contractors, and insurance.
(NIST,2018)
Analysis
The Framework is made up of three components: the Framework Core,
Profiles, and Tiers. Organizations can use these three components together
to conduct a comprehensive review of their cybersecurity program. The
framework core represents a variety of cybersecurity-related activities and
outcomes that can be found in a cybersecurity program, such as the
performance of vulnerability scans and the detection of malicious code, the
Profiles which can be used in conjunction with the Core, provide a summary
of an organization’s cybersecurity program and can be used to align an
organization’s cybersecurity activities (such as those found within the
Framework Core) with its business requirements, risk tolerances, and
organizational resources and the Tiers which are separate from the Core,
may be used by organizations to self-rank their cybersecurity risk
management practices. The attached file have the details on the functions.
Reference
Lei Shen. (2014). The NIST Cybersecurity Framework: Overview and
Potential Impacts.
Journal of Internet Law
,
18
(6), 3–6.
