Cybersecurity Framework

Course Description

The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how public and private sector organizations in the United States and around the world can assess and improve their ability to prevent, detect, and respond to cyber-attacks. The framework has been translated into many languages and is used by the governments of Japan and Israel, among others.

An Accessible and Powerful Framework

The NIST CSF is now the go-to playbook for countless organizations for building a robust data protection strategy. It’s structured along five core functions — Identify, Protect, Detect, Respond and Recover — each of which captures and curates the essential goals and actions that should be prioritized across the cybersecurity lifecycle.

The CSF helps make sense of what to do before, during, and after an incident: from shedding light on your data ecosystem and where the vulnerabilities lie; to locking down sensitive data and remediating known risks; to detecting malicious activity and meeting the threat with consistent and repeatable processes; to finally recovering through the quarantine of corrupted data, monitoring of ongoing threat activity, protocol adjustment, and related steps.

Become a NIST CSF Lead Implementer

The Certified NIST CSF LI certification certifies your ability to implement the formal structure, governance, and policy of a robust cybersecurity framework following internationally recognized and respected NIST best practices and standards. Get trained and certified as an expert in developing, implementing, and managing a robust cybersecurity program according to internationally adopted NIST CSF governance and management best practices. 

This 3-day NIST CSF workshop provides thorough coverage of the Framework, as well as sets out advice on the implementation of cybersecurity initiatives. 

The purpose of the course is to:

• Describe the principles and processes of cybersecurity governance and management;

• Provide thorough coverage of the requirements of the NIST CSF;

• Give practical guidance on designing a suitable framework for the organization, and how to leverage ISO 27110 to integrate NIST CSF recommendations into a comprehensive ISO 27001 ISMS;

• Give practical advice on implementing cybersecurity management;

• Prepare you for your NIST CSF certification exam required for Certified NIST CSF Lead Implementer professional credentialing.

• Establish a firm program starting point by using the NIST CSF to build out the initial cybersecurity management core policy.

Who is this course for? 

this course is meant for those responsible for:

• for IT Policy and Governance (e.g., Chief Information Security Officer)

• Business Operations (e.g., Operations Manager)

• IT Security Planning and Management (e.g., Director of Information Technology)

• Business Continuity and Disaster Recovery Planning (e.g., BC/DR Manager)

• IT Infrastructure (e.g., Network/System Administrator)

• Risk Management (e.g., Enterprise/Operations Risk Manager)

• IT Operations (e.g., Configuration/Change Managers)

• Procurement and Vendor Management (e.g., Contracts and Legal Support Managers)

Learning Objectives

• Framework Core Functions

  1. Identify

  2. Protect

  3. Detect

  4. Respond

  5. Recover

• Framework Implementation Tiers (Cyber Security Risk Management)

• Framework Profiles

• Converging the CSF Framework into an ISO 27001 Information Security Management System

• Using the NIST CSF for security audits, compliance, and communication