Slide 1: NIST Cyber Security Framework [Protect]
NIST Cyber Security Framework [Protect] 2024-03-11 1
Slide 2: Experts in Microsoft Cloud & Cyber Security
Appetite for disruption We are advisors with some of the industry's most Experts in skilled cloud and security experts Microsoft Cloud & Awarded Microsoft Partner of the Year multiple times Cyber Security Top 100 Microsoft Azure Migration & Modernization Partners in the world! We help our customers
Slide 3: About NIST Cyber Security Framework
NIST CSF Appetite for disruption About NIST Cyber Security Framework The NIST Cybersecurity Framework (“CSF”) provides a policy framework of computer security guidance for how organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks. The framework offers a
Slide 4: What are the possible Use-cases?
Appetite for disruption What are the possible Use-cases? CSF is a versatile tool designed to enhance the cybersecurity posture of organizations across various sectors. It provides a comprehensive and flexible approach to managing cybersecurity risks, tailored to the unique needs and circumstances of
Slide 5: What are the possible Use-cases?
Appetite for disruption What are the possible Use-cases? CSF is a versatile tool designed to enhance the cybersecurity posture of organizations across various sectors. It provides a comprehensive and flexible approach to managing cybersecurity risks, tailored to the unique needs and circumstances of
Slide 6: Everyone is Unique
NIST CSF Appetite for disruption Everyone is Unique Profiles are an organization's unique alignment of their organizational requirements and objectives, risk appetite, and resources against the desired outcomes of the Framework Core. - Profiles can be used to identify opportunities for improving cyb
Slide 7: NIST Releases Version 2.0 of Landmark Cybersecurity Framework
NIST Releases Version 2.0 of Landmark Cybersecurity Framework 2024-02-26 2024-03-11 7
Slide 8: Protect in V 1.1
NIST CSF Appetite for disruption Protect in V 1.1 Is one of the five core functions and forms the foundation of an organization's cybersecurity program. Each foundation has categories and subcategories. NIST CSF v 1.1 It focuses on the development and implementation of necessary controls to limit or
Slide 9: Protect in V 2.0
NIST CSF Appetite for disruption Protect in V 2.0 Is one of the five core functions and forms the foundation of an organization's cybersecurity program. Each foundation has categories and subcategories. NIST CSF v 2.0 It focuses on the development and implementation of necessary controls to limit or
Slide 10: Svenska kyrkan varnades i IT-attacken
Svenska kyrkan varnades i IT-attacken - tappte inte til sakerhetshal UPPDATERAD 18 DECEMBER 2023 PUBLICERAD 18 DECEMBER 2023 Finnish organisations targeted by Akira ransomware Published 15.01.2024 15:08 The National Cyber Security Centre Finland received 12 reports of Akira ransomware cases from Fin
Slide 11: Limiting and Containing Cybersecurity Events
Limiting Cybersecurity Events: Primarily involves implementing measures to prevent unauthorized access and reduce the attack surface. By adhering to the principle of least privilege, organizations ensure that users are granted only the access necessary to perform their duties. Secure configurations
Slide 12: Defense in Depth
NIST CSF Appetite for disruption Defense in Depth Submarines are subject to multiple threats and risks • Large force of pressure • Underwater mountains • Underwater mines • Depth charges • Communication interference • Enemy submarines Which your environment is as well • Ransomware • Threat Actors •
Slide 13: Identity Management, Authentication and Access control
NIST CSF Appetite for disruption Identity Management, Authentication and Impact on Cybersecurity Self-assessments questions Access control 1. How are identities issued, managed and revoked for all users including administrators? Reduced Risk of 2. How is the principle of least privilege applied Unau
Slide 14: Awareness and Training
NIST CSF Appetite for disruption Awareness and Training Impact on Cybersecurity Self-assessments questions 1. Is there a formal cybersecurity awareness program in place that is communicated to all Continuous training and employees and contractors? The organization’s personnel and awareness programs
Slide 15: Awareness is not training
Awareness is not training. The purpose of awareness presentations is to focus attention on security. Awareness presentations are intended to allow individuals to recognize IT security concerns and respond accordingly. The skills acquired during training are built upon the awareness foundation, in pa
Slide 16: Data Security
NIST CSF Appetite for disruption Data Security Impact on Cybersecurity Self-assessments questions 1. How is sensitive data identified and classified? 2. How is access to sensitive data controlled and Implementing strong data managed? Information and records (data) security measures 3. What encryptio
Slide 17: Information Protection Processes and Procedures
NIST CSF Appetite for disruption Information Protection Impact on Cybersecurity Self-assessments questions Processes and Procedures 1. Do we have a comprehensive backup strategy that ensures critical data is regularly backed up and Implementing strong data can be restored in a timely manner? securit
Slide 18: Veeam data breach - August 2018
Veeam data breach - August 2018 The exposed database, which had no password requirement, contained 200 gigabytes worth of data belonging to Veeam, a backup and data recovery company. Among that data were customer records, including names, email addresses, and some IP addresses. 1177 data breach – Fe
Slide 19: Maintenance
NIST CSF Appetite for disruption Maintenance Impact on Cybersecurity Self-assessments questions 1. How do you prioritize and schedule maintenance activities? Maintaining and repairing 2. How do you secure the maintenance of remote information system Regular, secure systems? components promptly ensur
Slide 20: Protective Technology
NIST CSF Appetite for disruption Protective Impact on Cybersecurity Self-assessments questions Technology: 1. Are network defenses appropriately segmented to limit attackers’ lateral movement? The organization understands 2. How do you secure remote access to your Risk assessment helps network? the
Slide 21: Evaluation of Implementation
Evaluation of Implementation Implementation Group (IG) IG1 IG2 IG3 Size of organization Smaller organizations Small to medium organizations Medium to large organizations 0-100 employees 20-500 employees 500+ employees Sensitivity of data IG1 organizations often handle data that has low sensitivity a
Slide 22: CIS Critical Security Controls Implementation Group
CIS Critical Security Controls Implementation Group 1
Slide 23: Q & A SESSION
Q & A SESSION 2024-03-11 23
Slide 24: FAQ
FAQ 1. What is the NIST Cybersecurity Framework (CSF)? 4. What is C-Suite’s role within Protect? The NIST CSF is a voluntary framework that provides a policy structure The C-suite, including roles such as the Chief Executive Officer (CEO), of computer security guidance for how organizations can asse