Related topicSecurity Awareness Training
Security awareness training helps people recognize risk, make safer decisions, and know how to report suspicious activity before a small mistake becomes an incident.
Open article →Related topicSecurity Awareness Effectiveness
Security awareness effectiveness evaluates whether education and reinforcement change risky behavior, improve reporting, and reduce preventable exposure for specific audiences.
Open article →Related topicSpecialized Role Training (PR.AT-02) — NIST CSF 2.0 Subcategory
Apply PR.AT-02 to achieve this CSF 2.0 outcome: Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind.
Open article →Related topicCyber Incident Exercises
Cyber incident exercises use discussion or simulated operations to test plans, decisions, coordination, communications, and recovery under realistic conditions.
Open article →Related topicIncident Response Training Program
An incident response training program develops role-specific knowledge, decision skills, tool proficiency, communication habits, and backup coverage for responders and stakeholders.
Open article →Related topicSecurity Control Assessment
A security control assessment determines whether selected controls are implemented correctly, operating as intended, and producing the desired outcome.
Open article →Related topicControl Design and Effectiveness
Control design asks whether a control is capable of addressing the intended risk, while operating effectiveness asks whether it works consistently in the real environment.
Open article →Related topicUsing MITRE ATT&CK® for Security Assessments
How to evaluate whether people, processes, architecture, controls, and telemetry can prevent, observe, investigate, and recover from relevant behaviors.
Open article →Related topicAI Literacy and Training
AI literacy and training give each stakeholder enough role-specific knowledge to use, build, supervise, procure, govern, or challenge AI responsibly.
Open article →Related topicHuman Risk Assessment
Human risk assessment examines roles, access, incentives, workload, behaviors, and likely failure modes so awareness and controls address real exposure rather than generic messaging.
Open article →Related topicImprovements from Tests and Exercises (ID.IM-02) — NIST CSF 2.0 Subcategory
Apply ID.IM-02 to achieve this CSF 2.0 outcome: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties.
Open article →Related topicSecurity Meeting Facilitation
Security meeting facilitation structures purpose, participants, evidence, options, decisions, owners, and follow-up so meetings resolve issues instead of merely exchanging status.
Open article →
