Security Frameworks (NIST, ISO 27001)

Summary

Structured, widely-adopted frameworks for building and maturing a security program — NIST's Cybersecurity Framework and ISO 27001 both provide a comprehensive checklist of controls and processes.

• 1Read a summary of the NIST Cybersecurity Framework's 5 core functions.
• 2Compare NIST CSF and ISO 27001 at a high level — both cover similar ground with different structures.
• 3Learn why frameworks provide a shared vocabulary auditors and security teams both understand.