The NIST CSF 2.0 release is finally here. As expected, CSF 2.0 adds a 6th core function: "govern." 20+ years ago we only had Protect, Detect, and Respond. Those sure were the good old days. "Have IDS, will travel." Now you have to plan, test, validate, discover, be proactive, deal with unknown unknowns... Pfft, and they call it progress. Read more: https://lnkd.in/gKW8kH5s CSF intro for the uninitiated: https://lnkd.in/g92gYcQa Or just dive right in - full CSF 2.0: https://lnkd.in/gVuuhESp
Been driving comprehensive Zero Trust at the Federal level leveraging dynamic capabilities for a while now. Properly done, it changes the game quite a bit.
😲 Protect is in there! It's greater than Detect! Maybe somebody listened. 🤣
Kyle Tackley Thought this might be of interest :-)
Co-Founder & CEO at Cypago | Cyber GRC Automation
8moA security plan without the Governance piece is like building a skyscraper without a blueprint. It's funny that only now, after endless number of severe cyber attacks, the 'G' gets its place in the 'RC' table ...