Direct book connectionGovern (GV) — NIST CSF 2.0 Function
Use the Govern Function to establish decision rights, risk direction, accountability, policy, oversight, and supply chain governance so cybersecurity risk is managed as an enterprise concern.
Open article →Direct book connectionIdentify (ID) — NIST CSF 2.0 Function
Use the Identify Function to maintain an evidence-based understanding of assets, dependencies, threats, vulnerabilities, likelihood, impact, and opportunities for improvement.
Open article →Direct book connectionProtect (PR) — NIST CSF 2.0 Function
Use the Protect Function to apply safeguards across identity, awareness, data, platforms, and infrastructure so risk is reduced before and during adverse events.
Open article →Direct book connectionDetect (DE) — NIST CSF 2.0 Function
Use the Detect Function to monitor environments and analyze events so potentially adverse activity is discovered, correlated, understood, and escalated.
Open article →Direct book connectionRespond (RS) — NIST CSF 2.0 Function
Use the Respond Function to manage, analyze, communicate, contain, and eradicate incidents using coordinated authority and tested procedures.
Open article →Direct book connectionRecover (RC) — NIST CSF 2.0 Function
Use the Recover Function to restore assets and operations, verify their integrity, communicate progress, and transition the organization back to stable operations.
Open article →Related topicAsset Inventory
An asset inventory is an authoritative record of the hardware, software, services, cloud resources, data stores, operational technology, and other components the organization must manage and protect.
Open article →Related topicSecurity Awareness Training
Security awareness training helps people recognize risk, make safer decisions, and know how to report suspicious activity before a small mistake becomes an incident.
Open article →Related topicIncident Response Lifecycle
Incident response is a coordinated capability that combines preparation, analysis, action, recovery, communication, evidence, and improvement.
Open article →Direct book connectionCybersecurity and Information Security
Cybersecurity and information security overlap substantially, but information security centers on protecting information while cybersecurity emphasizes risks arising from connected digital systems and cyberspace.
Open article →Direct book connectionCybersecurity Risk Management
Cybersecurity risk management connects assets, threats, vulnerabilities, controls, consequences, uncertainty, priorities, and accountable decisions.
Open article →Direct book connectionSingle Points of Failure
A single point of failure is a component, person, service, dependency, or process whose loss can stop a critical function because no effective alternative exists.
Open article →
