NIST Cybersecurity Framework

Voluntary cybersecurity risk management framework.

Jurisdiction: International / Framework
Issuer: National Institute of Standards and Technology
Effective: 2024-02-26

Sectors

Digital Infrastructure IT & Cybersecurity Banking & Finance Energy & Utilities Healthcare & Pharma Manufacturing Public Sector

Articles (44)

Governance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and Records