NIST Cybersecurity Framework 

A framework for safeguarding data and protecting our organization. 

~ Start = Table of Contents Ii Resources 

MediaPRO 

Cybersecurity & Privacy Education 
Table of Contents X 

1 What is the NIST Cybersecurity Framework (CSF} 

2 CSF Core Areas 

3 The CSF in Real Life 

4 Implementation Tiers 

5 Framework Profile 

6 Applying NIST in the Cloud 

7 CS F Exp I orer 

8 Summary 

( Back 

I The NIST Core describes th,e cybersecurity activities and outcomes you' ll help us accomplish by 

implementing the Framework. 

The Core is multi-d isciplinary, so it 's easy to understa nd regardless of technical background- but it's also 

robust. The exampl,es here are just an introd ction. 

0 CSF Core Components 

To learn more, d ick CSF Core Components. When you are fi niished, click Next. 

Ii Resources 4ii Menu INext ) 
CS F Core Components 

Functions 

At its highest level the CSF is organized into 5 Functions: Identify, Protect, Detect, Respond, a.nd Recover. 

Each Function addresses a variety of risks organizations may encounter. 

Don't think about this as a linear process; the Functions are performed concurrently and continuously to form an 

operat ional culture that addresses dynamic cybersecurity risk. 

FUNCTION 

Click any FUNCTION to learn more about how these activities are organized. 

X 
CS F Core Components 

Subcategories 

Within each Category are many Subcategories, 108 in tota l, that describe the outcomes that wi ll benefit our 

organization when implemented. 

FUNCTION 

IDENTIFY ID 

PROTECT PR 

CATEGORIES 

Asset Management (ID.AM): 

The data, personnel, devices, 

systems, and facil ities that 

enable the organlzation to 

achieve business purposes 

are identified and managed 

consistent with their relative 

importance to orga nizational 

objectives and the 

organization's risk strategy. 

Business Environment (ID.BE): 

The organ ization's mission, 

objectives, stakeholders, and 

activities are understood and 

prioritized; thls information is 

SUBCATEGORIES 

ID.BE-1: The organization's 

role in the supply chain is 

identified and communicated 

ID.BE-2: The organization's 

place in critica l infrastructure 

and its industry sector is 

identified and communicated 

ID.BE-3: Priorities for 

organizationa l mission, 

objectives, and activities are 

established and 

communicated 

ID.BE-4: Dependencies and . . . . 

X 

Explore the various FUN(TIONS, CATEGORIES, and SUBCATEGORIES as desiired. When you are finished, cliiclk NEXT. 

( Back Ill Resources A Menu INlext ) 
( Back 

A lot goes into implementing the CSF, and 

you may not always see the benefits until 

they're rea lly needed. 

I Think of the planning you do now lik,e 

an investment which will help protect 

us in the future. 

Let's see what could happen as a resu lt of 

implementing ... or not implementing, 

each Fu nction of the CSF. 

To learn more about FUNCTIONS, dick the cha1racters above. When you're finished, dick NEXT. 

Ila Resources 11 Menu Next ) 
IDENTIIFY 

Nick's a desktop support specialist who's service are·a is infected by malwa re from a spear phishing attack. Nick has no 

idea how many resources might be compromised, or what business functions are put at risk .. Nick doesn't even know 

how to properly report the incident! 

Click !IMPLEMENT the CSF! 

@) IMPLEM ENT THE CSF 

■ 

-

To learn more about FUNCTIONS, dick the ,characters above. When you're finished, dick NEXT. 

( Back II Resources 1f Menu 

X 

Next ) 
( Back 

Implementation Tiers describe how well we allign with the characteristics in the NIST Cyb,ersecurity Framework. 

Tiers are numbered 1-4. The more we align, the higher our Tier. 

I Tiers are important because they measure our cybersecurity triumphs, opportunities, and goals. 

App lying Tiers to our business isn't a pass or fail judgement it 's a marker of how wel l we're doing, and where 

we wa tto go. 

@) TIER 1 @) TIER 2 @) TIER 3 @) Tl ER 4 

To llearn more, click the TIER buttons. When you are finished, click Next. 

II Resources ii Menu Next ) 
( Back 

We've just touched on the some of the most 

importa nt components of NIST's cybersecurity 

Framework. 

I lrnpl,emen~ing the CSF's various actions and desired 

outcomes 1s up to you. 

@) Start 

The detai ls depend on your j ob role. No one person 

can implement the entire Framework; it ta kes a team 

of ski llled professionals from across our organization. 

This activity is optional. If you have a moment, s,ee 

which CSF Functions apply most to your ro l,e. Or click 

Next to continue to the cours,e Summary and the 

course completion. 

This activity is optional. To llearn more, click START. To skip this activity, click 

NEXT. 

Ii Resources ff Menu Next )