Andrew Pattison

NIST CSF 2.0

Your essential introduction to managing cybersecurity risks

• Broschiertes Buch

Produktbeschreibung

A concise introduction to the NIST CSF 2.0 The NIST CSF (Cybersecurity Framework) 2.0 is designed to protect organizations from cyber attacks. Although the CSF was developed to help US organizations involved in infrastructure to systematically organize their critical activities and ensure they remain up to date, Version 2.0 states that "The CSF is designed to be used by organizations of all sizes and sectors, including industry, government, academia, and nonprofit organizations, regardless of the maturity level of their cybersecurity programs." This book will help you understand how to: Begin implementing the NIST CSF 2.0 in your organization Build a cybersecurity program, adapt an existing one, or review existing security practices Integrate the NIST CSF 2.0 with other frameworks such as ISO 27001 and ISO 22301 Cybersecurity is an ever-increasing concern for organizations. Customers, clients, and regulators expect their data to be protected and are quick to punish those they see as failing in this duty. The NIST CSF 2.0 is an effective and flexible framework that is well-known across the US, and increasingly across the rest of the world. It also aligns closely with ISO 27001 and ISO 22301, and all three standards can operate concurrently. Organizations that comply with the NIST CSF 2.0, ISO 27001, and ISO 22301 demonstrate their commitment to cybersecurity to current and prospective stakeholders.

Produktdetails

• Verlag: IT Governance Ltd
• Seitenzahl: 96
• Erscheinungstermin: 27. Februar 2025
• Englisch
• Abmessung: 198mm x 129mm x 7mm
• Gewicht: 161g
• ISBN-13: 9781787785700
• ISBN-10: 178778570X
• Artikelnr.: 73400867

Autorenporträt

Andrew Pattison is the Global Head of GRC and PCI Consultancy at IT Governance, a GRC Solutions company. With a career stretching back to the mid-1990s, Andrew has worked extensively in information security, risk management and business continuity. He is currently supporting several major international organisations implement robust governance and risk approaches for the use and development of AI. He holds an MSc in Information Systems Management, is a certified auditor, and is accredited with both CISM® and CRISC® certifications. Alongside his consultancy work, Andrew has delivered comprehensive training across multiple GRC disciplines, including DORA, NIS, NIST, ISO/IEC 27001, business continuity, CRISC and CISM.