Applying NIST CSF 2.0
Using the functions, categories, profiles and tiers of the NIST Cybersecurity Framework 2.0, you map an organisation's current and target state and prepare an action plan.
Level 201 · 16 lessons · 15 practice labs
Lessons
The framework
- The CSF's purpose and what 2.0 changed
- The core: functions, categories, subcategories
- Informative references and mappings
- Quick task: sort existing safeguards into functions
Functions
- Govern: strategy, roles, supply chain
- Identify and Protect
- Detect, Respond, Recover
- Quick task: evidence examples for subcategories
Profiles and tiers
- Building a current profile
- Setting a target profile
- Implementation tiers
- Prioritising the gaps
- Quick task: fill in a profile table
Action
- Action plan and roadmap
- Using the CSF to talk to management and suppliers
- Capstone: a CSF profile and roadmap for a hospital
Practice labs
- Sort safeguards into functions: Sort twenty existing safeguards into the govern, identify, protect, detect, respond and recover functions.
- Find the category and subcategory: For ten activities, find the CSF category and subcategory identifier in the core table provided.
- Map through informative references: Link five subcategories to their ISO/IEC 27001 and CIS Controls counterparts using the mapping table and note partial matches.
- Choose evidence for a subcategory: Choose the fitting evidence example for eight subcategories from the list provided.
- Find the gaps in the Govern function: Review a company's documents against the strategy, roles and supply chain categories of Govern and list the gaps.
- An evidence file for Detect and Respond: Compile an evidence file for Detect and Respond subcategories from the alert records, incident record and exercise minutes provided.
- Fill in a profile table: From interview notes, mark the current state of ten subcategories as not, partly or fully implemented.
- Set the target profile: Write the target state for fifteen subcategories, with reasons, based on Lavinya Klinikleri's business goals and obligations.
- Assess the implementation tier: Determine an organisation's tier from a description of its risk management and write three changes needed for the next tier.
- Rank the gaps: Rank ten profile gaps using the given risk and effort scores.
- From gap to action: Write action plan rows with action, owner, resources and success measure for eight gaps.
- A roadmap under a budget limit: Place twelve actions across four quarters by cost, dependency and risk reduction and justify what is postponed.
- Summarise the profile for management: From a profile table, write a half-page summary with status per function and the three most important gaps.
- State expectations to a supplier using the CSF: Turn ten subcategories expected of a payroll provider, and the evidence to request, into a written expectations list.
- A profile and roadmap for a hospital: From a hospital's assessment data, combine the current profile, target profile and first-year roadmap in one document.
About this course
Using the functions, categories, profiles and tiers of the NIST Cybersecurity Framework 2.0, you map an organisation's current and target state and prepare an action plan.
What you will learn
- The framework
- Functions
- Profiles and tiers
- Action
Prerequisites
Finishing the level 101 courses of the same path, or knowing those topics, is enough.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 201; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.