Cybersecurity Risk Management-NIST Framework

Preface – Overview of the NIST Framework

• BACKGROUND ON THE FRAMEWORK
• FRAMEWORK BASED ON RISK MANAGEMENT
• THE FRAMEWORK CORE
• FRAMEWORK IMPLEMENTATION TIERS
• FRAMEWORK PROFILE
• OTHER ASPECTS OF THE FRAMEWORK DOCUMENT
• RECENT DEVELOPMENTS AT NIST

Cybersecurity Risk Planning and Management

• INTRODUCTION
• WHAT IS CYBERSECURITY RISK MANAGEMENT?
• ASSET MANAGEMENT
• GOVERNANCE
• RISK ASSESSMENT AND MANAGEMENT
• SUMMARY
• ESSENTIAL READING ON CYBERSECURITY RISK MANAGEMENT

User and Network Infrastructure Planning and Management

• INTRODUCTION
• INFRASTRUCTURE PLANNING AND MANAGEMENT IS ALL ABOUT PROTECTION, WHERE THE RUBBER MEETS THE ROAD
• AWARENESS AND TRAINING
• DATA SECURITY
• INFORMATION PROTECTION PROCESSES AND PROCEDURES
• MAINTENANCE
• PROTECTIVE TECHNOLOGY
• SUMMARY
• ESSENTIAL READING ON NETWORK MANAGEMENT

Tools and Techniques for Detecting Cyber Incidents

• INTRODUCTION
• WHAT IS AN INCIDENT?
• DETECT
• SUMMARY
• ESSENTIAL READING FOR TOOLS AND TECHNIQUES FOR DETECTING A CYBERATTACK

Developing a Continuity of Operations Plan

• INTRODUCTION
• ONE SIZE DOES NOT FIT ALL
• RESPONSE
• ANALYSIS
• MITIGATION
• RECOVER
• SUMMARY
• ESSENTIAL READING FOR DEVELOPING A CONTINUITY OF OPERATIONS PLAN

Supply Chain Risk Management

• INTRODUCTION
• NIST SPECIAL PUBLICATION 800-161
• SOFTWARE BILL OF MATERIALS
• NIST REVISED FRAMEWORK INCORPORATES MAJOR SUPPLY CHAIN CATEGORY
• SUMMARY
• ESSENTIAL READING FOR SUPPLY CHAIN RISK MANAGEMENT

Manufacturing and Industrial Control Systems Security

• ESSENTIAL READING ON MANUFACTURING AND INDUSTRIAL CONTROL SECURITY

Appendix A: Helpful Advice for Small Organizatio...plement Some of the Book’s Recommendations

Appendix B: Critical Security Controls Version 8.0 Mapped to NIST CSF v1.1