How to Comply with the NIST Cybersecurity Framework
21.10.2020
Read
As per the NIST, though the organization can comply with its cybersecurity requirements and they can utilize the Framework to determine and express those requirements, there is no need to comply with the Framework itself. According to the NIST, the Framework should instead be “leveraged” and “used.”
NIST requires companies to take business requirements and material risks into consideration. How? In simple words, organizations are not simply required to hand the NIST Framework to their security experts and tell them to check boxes and issue a certificate of compliance. Instead, enterprises should adhere to the NIST recommendations, according to which, the NIST Framework concentrates on using business drivers to help guide cybersecurity activities and considering cyber risks as part of the company’s risk management processes. NIST is not requiring enterprises to accomplish outcomes of every NIST Core Functions, which involve category Identifier and Category further incorporating various security activities. Instead, these companies are expected to consider their material risks and business requirements. In addition, they should make informed and reasonable decisions employing the NIST Framework to assist in identifying and prioritizing appropriate and cost-effective enhancements.
The NIST has added a new section – namely “Self-Assessing Cybersecurity Risk with the Framework” to its Framework version 1.1. Complying with this section, companies are recommended to perform self-assessments either internally by themselves or outsourcing with third parties. This assessment should be accurate so that a company could better understand their current cybersecurity risk profile. The purpose of self-assessment is to identify risks and apply remedial measures to fill gaps and resolve identified risks in order to thwart future cybersecurity incidents.
Since NIST Framework pays special attention to risk management, the role of SIEM and SOAR solutions is indispensable. Why? Read on!
The companies should be armed with SOAR and SIEM solutions to safeguard their IT assets. SIEM can reduce the risk of Advanced Persistent Threats (APT) by detecting symptoms of the attack at initial stages and can apply prompt measures to mitigate them on time. Using SIEM, companies can avert attacks and stop threat actors before they steal money or execute data exfiltration.
Likewise, a SOAR system can provide a robust and automated risk management strategy. Employing this, companies can leverage security orchestration, automation, and response capabilities to better deal with cybersecurity threats.
Selecting an appropriate and effective SIEM and SOAR solutions need a wise approach. Logsign offers the next-gen SIEM and SOAR tools that are effective against cybersecurity risks and threats.
