Skip to Content
NIST CSF 2.0 - Your essential introduction to managing cybersecurity risks
book

NIST CSF 2.0 - Your essential introduction to managing cybersecurity risks

by Andrew Pattison
February 2025
Beginner to intermediate
94 pages
1h 27m
English
IT Governance Publishing
Content preview from NIST CSF 2.0 - Your essential introduction to managing cybersecurity risks

CHAPTER 2: FRAMEWORK CORE

The framework core (‘core’) defines the high-level cybersecurity functions that protect your organization. It takes a structured approach to managing cybersecurity risk and outlines the key outcomes of implementing the framework. The core has three elements:

1. Functions

2. Categories

3. Subcategories

Figure 1 illustrates the core structure.7

This figure is a flowchart. At the top, there is a rectangle shape labelled ‘Cybersecurity Framework Core’. Underneath this, there are three blue lines that lead to three separate pale blue rectangle shapes. The first rectangle shape is on the left-hand side and is labelled ‘Functions’. The second rectangle shape is in the middle and is labelled ‘Categories’. The third rectangle shape is on the right-hand side and is labelled ‘Subcategories’. ‘Functions’, ‘Categories’ and ‘Subcategories’ are the three core elements of the CSF. A blue line flows from the ‘Functions’ shape to a smaller yellow rectangle shape underneath it. This yellow rectangle is labelled ‘Govern’. A blue line connects ‘Govern’ to a blue rectangle underneath it labelled ‘Identify’. A blue line connects ‘Identify’ to a purple rectangle underneath it labelled ‘Protect’. A blue line connects ‘Protect’ to an orange rectangle underneath it labelled ‘Detect’. A blue line connects ‘Detect’ to a red rectangle underneath it labelled ‘Respond’. A blue line connects ‘Respond’ to a green rectangle underneath it labelled ‘Recover’. The rectangles: ‘Govern’, ‘Identify’, ‘Protect’, ‘Detect’, ‘Respond’ and ‘Recover’ exist within a blue lined perimeter. Returning to the ‘Categories’ core element, a vertical blue line connects this shape to six grey rectangle shapes underneath it. The first two grey rectangles each have a blue line that exits their left-hand side, and reaches the blue perimeter next to the ‘Identify’ rectangle on the left-hand side. The third and fourth grey rectangles each have a blue line that exits their left-hand side, and reaches the blue perimeter next to the ‘Detect’ rectangle on the left-hand side. The fifth and sixth grey rectangles each have a blue line that exits their left-hand side, and reaches the blue perimeter next to the ‘Recover’ rectangle on the left-hand side. Underneath the third core element rectangle ‘Subcategories’, there are eight light grey rectangles. These eight rectangles are not connected to each other, but the first four have blue lines that exit their left-hand side and connects each of them to the second grey rectangle underneath the ‘Categories’ core element. The last four light grey rectangles have a blue line that exit their left-hand side and connects them to the sixth grey rectangle underneath the ‘Categories’ core element.

Figure 1: Framework Core Structure

Functions

The core contains six functions that outline key cybersecurity outcomes:

1. Govern: Understand the context in which the organization operates. Define policies, roles and responsibilities, risk management strategies, and oversight mechanisms, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services
QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

Alan Calder
Cybersecurity and Third-Party Risk
A Comprehensive Guide to the NIST Cybersecurity Framework 2.0
Network Protocols for Security Professionals

Network Protocols for Security Professionals

Yoram Orzach, Deepanshu Khanna

Publisher Resources

ISBN: 9781787785687Publisher Website