NIST analysis for cybersecurity

Do you want to strengthen the IT security of your company? With the NIST Cyber Security Framework, you get a structured framework based on five pillars.

What is NIST CSF?

The NIST Cyber Security Framework (CSF) is a framework used to work systematically with IT security. It is NIST, or the National Institute of Standards and Technology, that has developed the framework, which consists of five pillars.

With NIST CSF as the framework, it is about working continuously to identify threats and prepare the company for incidents that threaten IT security. The framework has clear recommendations on what should be in place within the five pillars.

It is also common to conduct a GAP analysis to map risk areas and the degree of risk; Where are we today, where should we at minimum be, and what is the recommended level? Then one implements measures to work to cover the “gaps.”

Who can perform NIST CSF?

NIST CSF does not need to be performed by someone with heavy technical expertise, but by someone with good knowledge of the company’s IT structure and routines. Many IT providers offer some form of GAP analysis, and these are usually conducted according to the “two major” frameworks; CIS 20 and NIST CSF.

If you are someone who likes to try things yourself, you can buy various ready-made tests online, or you can find the entire framework on NIST's websites; Cybersecurity Framework | NIST. 

If you prefer to spend your time on things other than measures and frameworks for IT security, you can always call our IT guru, Morten – he will help you!

Are you getting started with NIST CSF and are stuck? Then Morten is also the man to contact.