CHAPTER 2: FRAMEWORK CORE
The Framework core (‘core’) is, in essence, the actual cybersecurity functions that protect your organization. It takes a structured approach to managing cybersecurity risk, and outlines the key outcomes of implementing the Framework. The core has four elements:
•Functions
•Categories
•Subcategories
•Informative references
Figure 1 illustrates the core structure.
Figure 1: Framework core structure (Source: NIST Cybersecurity Framework, Section 2.1)
Functions
The core recognises five functions that outline how to organize cybersecurity activities:
1.Identify potential cybersecurity risks to your information assets
2.
Get NIST Cybersecurity Framework - A pocket guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
