Overview - NIST Cybersecurity Framework 2.0

Keep hearing about the NIST Cybersecurity Framework 2.0, but not sure what it is or why you'd use it? Check out this video to get an introduction to the CSF and learn about its 3 primary components: the Core, the Tiers, and the Profiles.
Presented by Kelly Hood, CISSP (@KellyHood_)
Optic Cyber Solutions strives to secure your business, keeping you in control through our assessment, implementation, and advising services. For more information about Optic Cyber Solutions and how we can help you integrate the CSF update or conduct a CSF gap assessment, reach out at [e-mail] or check out our website at www.OpticCyber...!
Video: What Changed? - NIST Cybersecurity Framework 2.0
• What Changed? - NIST C...
Video: Profiles - NIST Cybersecurity Framework 2.0
• Profiles - NIST Cybers...
Video: Do I Measure Up? NIST Cybersecurity Framework 2.0
• Do I Measure Up? - NIS...
CSF 2.0 Maturity & Progress Tracker (MaPT):
optic-cyber-so...
CSF 2.0 Profile Template:
43828014.hs-sit...
The NIST Cybersecurity Framework (CSF) 2.0:
nvlpubs.nist.g...
Quick Start Guides:
www.nist.gov/c...
CSF 2.0 Profiles:
www.nist.gov/c...
Informative References:
www.nist.gov/c...
Cybersecurity & Privacy Reference Tool (CPRT):
csrc.nist.gov/...
CSF 2.0 Reference Tool:
csrc.nist.gov/...
CSF 2.0 Website:
www.nist.gov/c...
CForum Community:
/ 8184993

[@proaxiom_cyber]

Awesome video! Great introduction to NIST and it's profiles. 👏

[@mohchinkhan237]

Very well explained… looking forward for more videos in future

[@lahcentizi]

Excellent explanation, thanks for sharing

[@javier_]

Thank you!

[@onlinesaidasa9105]

Namaste NIST 2.0 is the Gold standard in Cybersecurity frameworks. Apart from that , it is good for a security specialist to have atleast a broad understanding of a few other Cyber security frameworks 1.) ISO 27001/27002 2.) SOC2 3.) NERC - CIP 4.) HIPAA 5.) GDPR 6.) FISMA

[@OpticCyber]

Agreed! We'll add these to our list of future topics to cover. Thanks for you support!

[@akocemong]

What are the subcategories from the Framework that can be incorporated into vulnerability management process?

[@OpticCyber]

Looking from a preventative point of view, a few of the Subcategories that we typically consider when developing vulnerability management programs include: GV.PO-02 to establish the policy and plan, ID.RA-01 to identify vulnerabilities, ID.RA-05 to priorities them for remediation, ID-RA-06 to manage them, ID.IM-04 to plan for addressing exploited vulnerabilities, and PR.PS-02 to enable routine patching.

[@arthurkatz8035]

Thanks Kelly

[@srleb3462]

Thanks for informative video

[@MrKhann]

Thank you Kelly! very articulate and awesome explanation. Would it be possible for you to share with me resources or video link for maturity assessment based on NIST?

[@ishwaryanarayan1010]

Do you have any openings for cyber security professional out there ?