Do you want to strengthen IT security in your business? With the NIST Cybersecurity Framework, you get a structured framework based on five pillars.

What is NIST CSF?

The NIST Cybersecurity Framework (CSF) is a framework used to work systematically with IT security. NIST, or the National Institute of Standards and Technology, developed the framework, which consists of five pillars.

Using NIST CSF as a framework involves working continuously to identify threats and prepare the business for incidents that threaten IT security. The framework provides clear recommendations on what should be in place across the five pillars.

It is also common to conduct a GAP analysis to identify risk areas and the level of risk: Where are we today, where should we minimally be, and what is the recommended level? Measures are then implemented to work towards closing “the gaps”.

Who can carry out NIST CSF?

NIST CSF does not need to be carried out by someone with heavy technical expertise, but rather someone with good knowledge of the company's IT structure and routines. Many IT providers deliver a form of GAP analysis, and these are usually conducted in accordance with the “two major” frameworks: CIS 20 and NIST CSF.

If you prefer to try things yourself, you can purchase various pre-made tests online, or you can find the entire framework on NIST's website: Cybersecurity Framework | NIST. 

If you prefer to spend your time on things other than IT security measures and frameworks, you can always call our IT guru, Morten – he will help you!

Have you started with NIST CSF and become stuck? Then Morten is also the person to contact.