NIST, CSF, Cybersecurity. Helena Celeste Mata Rico

Helena Celeste Mata Rico

1. Guide to NIST CSF
2.0forSecurity |

Helena Celeste Mota Rico

2. It is of the utmost
importance to prioritize

data security and
recovery planning in
order to effectively
combat these threats.

The recent update to
the MIST rsecurity
Framework represents
a significant shift in
the standard approach

3. NIST Cybersecutirty
Framework

NIST
Cybersecurity
Framework

4. NIST Cybersecutirty
Framework
The NIST Cybersecurity Framework introduced
in 2014, manages risk through industry
standards and collaboration to protect
information systems. CSF 2.0, released in

2024, includes significant changes for all
organizations.

February 12, 2013 February 12, 2014 April 16, 2018
Executive Framework Framework
Order 13636 Version 1.0 Version 1.1
Issued Released Released

| | |

July 1, 2013 December 18, 2014 February 26, 2024
Preliminary Cybersecurity CSF 2.0

Framework Enhancement Released
Released Act of 2014

5. NIST Cybersecutirty
en

The CSF is structured around six core

functions, wich are considered together to
provide a comprehensive recommendation
based on the cybersecurity risk life cycle.

DO : 6

Identify Protect Detect Respond Recover
Impl t o
Implement cybersecurity Respond to Maintain plans
Improve safeguards for measures for berlin for resilience,
j tical i timely incident Y ty restore impaired
cybersecurity CHRICSl SSEWIES SEE incidents wi sonicss achieve
a continuity and identification, planning, 2
risk cybersecurity emphasizing i
managemente incident continuous
mitigation.

analysis, and

timely recovery
communication.

after cyber
incident.

monitoring.

6. NIST Cybersecutirty
en

© Govern aw

CSF 2.0 introduces a new Governor
function that provides comprehensive
management and governance of
cybersecurity risk. This includes
defining strategy, policies, oversight,
roles, responsibilities, and integration.

7. CSF2

Key changes

NU NN A

CSF 2.0 is now
available to all
organizations, not just
those in the critical
infrastructure sector.

The new framework
introduces the "Govern"
function, which
enhances
accountability and
transparency.

The framework is
designed to benefit
organizations of all

sizes and industries by
providing universally
relevant guidelines for
prioritizing
cybersecurity goals.

8. NIST CSF 2.0: Steps

NIST CSF
2.0

Step 1: Understand
the Framework

Step 2: Conduct a Gap
Analysis

Step 3: Set
Priorities

Step 4: Create a
Target Profile

Step 5: Implement
an Action Plan

o Step 6: Continuous
Improvement

Step 7: Train and
9 Educate

Step 8: Leverage the
© CSF 2.0 Reference
Tool

9. The NIST CSF version 2.0 is designed to enhance
cybersecurity by introducing new features like
the Govern function and prioritizing supply chain
risk management. It emphasizes inclusivity and
collaboration, involving stakeholders at all levels.
Cultivating a cybersecurity culture through
training and communication is vital.

Organizations that embrace CSF 2.0 will be
better positioned to protect assets, maintain
trust, and build resilience against cyber threats.

10. Thank you! &

Contact:

© Helena Celeste Mata Rico