February 2025
Beginner to intermediate
94 pages
1h 27m
English
Content preview from NIST CSF 2.0 - Your essential introduction to managing cybersecurity risksBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
CHAPTER 7: ALIGNMENT WITH OTHER FRAMEWORKS
The CSF is an effective and flexible framework that is well-known across the United States, and increasingly across the rest of the world. However, one valid criticism of the framework is that it lacks independent verification. Even the most stringent target profile means little if the controls selected to meet outcomes are ineffective or poorly maintained.
With no independent way to verify compliance with the CSF, many organizations will ask their partners to instead achieve accredited certification to internationally recognized standards such as ISO 27001 and ISO 22301. These standards align closely with the CSF, and all three can be operated concurrently.
ISO 27001
ISO 27001 provides a specification ...