Question

The NIST framework core is meant to be meant to be generally applicable. However, organizations have varying security needs depending on their industry, information systems, data assets, etc. How may an organization account for their individual needs when applying the NIST framework?

Answer 1

An organization can easily account for its needs using the NIST framework. It can be done by understanding this framework completely. It is a set of cybersecurity activities. It offers various functions and tiers for implementation.

Organization can use this five step process while deciding on using NIST framework:

1. Identify the environment:

Organization needs to understand the type of environment in place in the organization. It can be helpful while managing system risks, data, assets, capabilities, etc. Digital as well as physical assets should be fully visible along with their interconnections. Such understanding can help in putting the right type of policies as well as procedures into place.

2. Protection and safety tips:

Potential cybersecurity measures should be in place. Organization should also control any kind of access to assets of the organization. This can be done by offering training to the staff. This will help in establishing baseline configuration in the network.

3. Detection of potential risks:

Potential risks should be detected quickly. This can be achieved when there is network visibility and cyber incidents are easily anticipated. Regular monitoring can help in understanding different ways in which the network will be configured for the proper analysis.

4. Responding to the incidents:

A response plan should be in place. This helps in understanding the NIST framework configuration as well as other communication lines. The response strategies will help in the learning of NIST operations that can be used on time.

5. Recovery:

After all is set, there comes the need to implement effective activities. This is included in the cyber security recovery plan. The plan activities can then be coordinated with NIST functions.