Apptega’s Post

Have you updated your NIST CSF alignment to CSF v 2.0? Apptega makes it easy to self-assess, manage, and track alignment - including when requirements change. We wrap the service around the tool to make sure you have the guidance you need to stay on track and have confidence in your alignment: https://lnkd.in/e7sX6r-k

The National Institute of Standards and Technology (NIST) has released version 2.0 of its Cybersecurity Framework (CSF). This new version expands the framework's scope to support all types of organizations, not just critical infrastructure sectors. It introduces a new function called "Govern," which focuses on integrating cybersecurity into enterprise risk management and decision-making processes. Additionally, NIST has launched a new reference tool to help users explore the framework's core components in both human and machine-readable formats.. Refrences: https://lnkd.in/e9XKAynN

NIST CSF 2.0 Calls for Greater Strategic Focus, Transparency, Accountability: By: Igor Volovich, VP, Compliance Strategy The release of the NIST Cybersecurity Framework (CSF) 2.0 marks a significant evolution in the landscape of cybersecurity standards and practices. With the introduction of the GOVERN function, NIST CSF 2.0 sets a new precedent for how organizations should approach governance, strategy, and risk management maturity. This addition reflects […] The post NIST CSF 2.0 Calls for Greater Strategic Focus, Transparency, Accountability appeared first on Qmulos. The post NIST CSF 2.0 Calls for Greater Strategic Focus, Transparency, Accountability appeared first on Security Boulevard. source https://lnkd.in/dhj_A7ZJ https://lnkd.in/dhiaDYFp

National Institute of Standards and Technology (NIST) has now published version 2.0 of its widely used Cybersecurity Framework #NISTCSF. Almost 10 years after the original 1.0 was introduced, the fundamental approach—anchored in risk management and leveraging widely used standards—remains highly relevant and deeply important. Effective implementation of the Framework requires the use of processes that continually improve cybersecurity over time in the face of a dynamic risk environment. You will likely notice 3 areas of innovation in this latest version of the NIST CSF: 1. Addition of a 6th Core Function “Govern” to the already familiar list of “Identify | Protect | Detect | Respond | Recover”; 2. Greater emphasis on supply chain risk management throughout the Framework; 3. Shifting the “informative references” from being directly included in the Framework to a separate “Cybersecurity and Privacy Reference Tool,” which can be updated without waiting for version changes to the document itself. NIST CSF 2.0 Link: https://lnkd.in/eTrNpskW CPRT Link: https://lnkd.in/erPaqUq7

💡 Did you know that a new version of the cybersecurity framework NIST 2.0 was just released? Its main changes in terms of content are the following: - The addition of a new “Govern” function, that aims at reinforcing the governance of cybersecurity within entities; - The reinforcement of requirements associated to supply chain risk management and incident management; - More generally, a vast reorganization within existing categories and new requirements fitting the evolution of technologies and of the threat landscape. However, NIST 2.0 also strongly innovates through the development of multiple tools and documents aiming at facilitating the implementation of the standard within companies, like Quick Start Guides for users with specific common goals, or mapping documents. More information can be found here 👇🏻 https://lnkd.in/eYyGZ2f4

Exciting developments are underway in the realm of cybersecurity compliance, and we want you to be at the forefront of the conversation. Join us for next week's webinar where we'll explore the intersection of Continuous Controls Monitoring (CCM) and NIST CSF 2.0. 🗓️ April 24, 2024 ⏰ 2:00 pm - 3:00 pm ET 🌐 Virtual In this session, industry experts Edward Amoroso, Founder and CEO of TAG Infosphere, Larry Whiteside Jr., CISO of RegScale, Ron Sivonda, CISO of ScaleSec, and Jorel Van Os, CISO of Acrisure will discuss: • The significance of CSF 2.0 for your organization's compliance efforts • The real-world implications of NIST CSF 2.0 • The new Govern addition to NIST CSF 2.0 • Leveraging continuous controls monitoring for compliance with NIST CSF 2.0 Don't miss out - seats are filling up fast. Register here 👉 https://loom.ly/Ln7wF7Q #Webinar #Webcast #Resources #CCM #Compliance #Security

🚨 Positive News from the NIST NVD Team! 👇 NIST has released a new NVD announcements page + some important updates: 𝗔𝗱𝗱𝗶𝘁𝗶𝗼𝗻𝗮𝗹 𝗦𝘂𝗽𝗽𝗼𝗿𝘁 𝗖𝗼𝗻𝘁𝗿𝗮𝗰𝘁: NIST has contracted additional support to restore pre-February 2024 CVE processing rates within the next few months. 𝗔𝗱𝗱𝗿𝗲𝘀𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗕𝗮𝗰𝗸𝗹𝗼𝗴: NIST is collaborating with CISA to ingest the backlog of unprocessed CVEs to the NVD, with plans to clear the backlog by the end of the fiscal year. 𝗟𝗼𝗻𝗴-𝗧𝗲𝗿𝗺 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀: NIST is implementing technology and process updates to sustainably manage the increasing volume of vulnerabilities. This includes supporting automation in vulnerability management, security measurement, and compliance. 𝗖𝗩𝗘 𝟱.𝟭 𝗥𝗲𝗰𝗼𝗿𝗱 𝗦𝘂𝗽𝗽𝗼𝗿𝘁: Since May 14, 2024, NIST has been ingesting both CVE 5.0 and CVE 5.1 records, including support for CVSS 4.0 and #purl. 𝗖𝗼𝗺𝗺𝗶𝘁𝗺𝗲𝗻𝘁 𝘁𝗼 𝘁𝗵𝗲 𝗡𝗩𝗗: NIST assures that it remains dedicated to maintaining and modernizing the NVD. 𝗜𝗺𝗽𝗿𝗼𝘃𝗲𝗱 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻: Most importantly in my opinion, NIST promises that moving forward they will keep the community informed of their progress toward normal operational levels and their future modernization plans. Only time will tell if these commitments will indeed materialize... #VulnerabilityManagement #InformationSecurity #CyberSecurity National Institute of Standards and Technology (NIST)

National Institute of Standards and Technology (NIST) released the Cybersecurity Framework 2.0 and here is my perspective on the update.  🌐 Function Over Category:  "GOVERN" is a new function which intensifies the focus on enhanced risk mitigation, improved decision-making, and a stronger compliance posture. 🔍 Focus on Supply Chain Risk:  The updated framework places a greater emphasis on managing supply chain risk, reflecting the growing importance of securing the end-to-end process. 🌟 More Accessible, More Resources:  Groundbreaking news for companies of all sizes! Implementing the #nistcsf is now easier to use because of the additional resources like Quick Start Guides and implementation examples.  🛠️Tailor the Framework to Your Needs:   The framework has been designed to be more flexible, allowing for customization based on each organization's specific needs.  The new version is a significant step forward in providing a flexible, adaptable framework addressing the evolving cybersecurity landscape and the needs of organizations and why we are excited to continue the NIST CSF journey with Version 2.0. 💪  Kathrin Becker Daniel Fryer Hedayatollah Hosseini, Dr. Peter Westphal  #CyberFramework2.0 #NISTCSF #womenincybersecurity 

NIST CSF 2.0 Pls check Iris Vanessa Barber post highlighting several key areas updated.

Just completed a two-day course on the NIST 2.0 Cybersecurity Framework! Here’s what I’ve learned: Risk Management 🔍: Developed a solid understanding of asset management and governance. It's fascinating to see how identifying vulnerabilities early can guide us in prioritizing our security efforts. Identity & Infrastructure 🔑: Explored critical aspects of authentication, access control, and data security through an engaging scenario with a fictional company. It was an effective way to see these concepts in action. Incident Detection & Response 🚨: This session focused on the essentials of detecting incidents and the steps necessary to manage them effectively. It really highlighted the importance of preparedness and response strategies. Supply Chain Security 📦: Addressed the complexities of software bills of materials and the importance of securing industrial control systems as outlined in NIST SP 800-161. These two days have enriched my understanding of key cybersecurity practices and I’m eager to apply these new insights.