NIST Cybersecurity Framework - A pocket guide

CHAPTER 6: ALIGNMENT WITH OTHER FRAMEWORKS

Because this Framework is relatively straightforward, it would be simple to implement it as part of another implementation project, for example, becoming certified to a best-practice standard, particularly ISO 27001. It can also be implemented to help manage compliance with cybersecurity laws and regulations, such as 23 NYCRR 500, New York State’s Cybersecurity Requirements for Financial Services Companies.

ISO 27001

As mentioned, ISO 27001 is an international standard, providing specifications for a best-practice ISMS. A best-practice ISMS generally focuses on protecting the organization’s information assets, and as such aligns primarily with the identify, protect, and detect functions, and applies ...