How to perform a NIST analysis

It pays to work systematically and smartly with IT security in 2021. There are many ways to do this – one of them is the NIST Cyber Security Framework!

What is NIST CSF?

NIST Cyber Security Framework (CSF) is a framework used to work systematically with IT security. It is NIST, or the National Institute of Standards and Technology, that has developed the framework consisting of five pillars.

With NIST CSF as a framework, it is about continuously working to identify threats and prepare the company for incidents that threaten IT security. The framework has clear recommendations on what should be in place within the five pillars.

It is also common to conduct a GAP analysis to map risk areas and the degree of risk; Where are we today, where should we at least be, and what is the recommended level? Then measures are implemented to work to cover "the gaps".

Who can execute NIST CSF?

NIST CSF does not need to be performed by someone with heavy technical expertise, but someone with good knowledge of the company’s IT structure and routines. Many IT providers offer some form of GAP analysis, and these are usually carried out according to the "two major" frameworks; CIS 20 and NIST CSF.

If you are someone who likes to try things yourself, you can buy various ready-made tests online, or you can find the entire framework on NIST's websites; Cybersecurity Framework | NIST. 

If you like to spend your time on things other than measures and frameworks for IT security, you can always call our IT guru, Morten – he will help you!

Are you working on NIST CSF and are stuck? Then Morten is also the man to contact.