Your shopping cart is currently empty.
The NIST CSF (Cybersecurity Framework) 2.0 is designed to protect organizations from cyber attacks. Although the CSF was developed to help US organizations involved in infrastructure to systematically organise their cyber security activities and ensure they remain up to date, Version 2.0 states that “The CSF is designed to be used by organizations of all sizes and sectors, including industry, government, academia, and nonprofit organizations, regardless of the maturity level of their cybersecurity programs.”
Unlike many similar cybersecurity frameworks, the CSF does not specify the measures an organization should use to secure its systems or develop its cybersecurity program. Instead, it focuses on cybersecurity outcomes without specifying what must be done to achieve them, relying on cybersecurity risk assessment and a wide range of examples to derive appropriate and cost-effective controls that suit the business. This flexibility is a key reason for the CSF’s ongoing popularity.
This book will help you understand how to:
The book is available for pre-order and is expected to be published on February 27, 2025. Orders will be fulfilled once the book is available.
Buy now, pay later! Enjoy the benefits of paying by purchase order with an IT Governance corporate account. Apply online today or call our service center team on +1 877 317 3454.
Cybersecurity is an ever-increasing concern for organizations. Customers, clients, and regulators expect their data to be protected and are quick to punish those they see as failing in this duty.
The NIST CSF 2.0 is an effective and flexible framework that is well-known across the US, and increasingly across the rest of the world. It also aligns closely with ISO 27001 and ISO 22301, and all three standards can operate concurrently.
Organizations that comply with the NIST CSF 2.0, ISO 27001, and ISO 22301 demonstrate their commitment to cybersecurity to current and prospective stakeholders.
Andrew Pattison is the global head of GRC and PCI consultancy at GRC International Group. He has been working in information security, risk management, and business continuity since the mid-1990s, helping large international organizations across many sectors. Andrew is a certified auditor, as well as holding CISM® and CRISC® certifications. He has provided extensive training in multiple GRC fields and is an approved APMG trainer.