CHAPTER 1: AIMS OF THE FRAMEWORK
In its own words, NIST states in Section 2.0 of the Framework:
The Framework provides a common language for understanding, managing, and expressing cybersecurity risk both to internal and external stakeholders. It can be used to help identify and prioritize actions for reducing cybersecurity risk, and it is a tool for aligning policy, business, and technological approaches to managing that risk. It can be used to manage cybersecurity risk across entire organizations or it can be focused on the delivery of critical services within an organization. Different types of entities – including sector coordinating structures, associations, and organizations – can use the Framework for different purposes […].
In short, ...
Get NIST Cybersecurity Framework - A pocket guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
