#csf2 — Public Fediverse posts

🚨 New from NIST: SP 800-61 Rev. 3 brings a major shift in incident response strategy.

Key upgrades include:
・🔁 Alignment with the updated Cybersecurity Framework (CSF 2.0)
・🛡️ Emphasis on governance, continuous improvement, and real-world procedures
・📋 Clearer roles, responsibilities, and escalation protocols
・🔍 A flexible incident response lifecycle model—fit for modern threats
・📚 Encourages tailored policies, playbooks, and training

The updated guidance moves beyond static checklists, offering a holistic view of incident handling that ties into risk management and organizational resilience.

Full details here: https://industrialcyber.co/nist/nist-publishes-sp-800-61-rev-3-overhauling-incident-response-guidance-for-csf-2-0/

#Cybersecurity #NIST #CSF2 #IncidentResponse #RiskManagement #Governance #OperationalResilience #Infosec

🚨 New from NIST: SP 800-61 Rev. 3 brings a major shift in incident response strategy.

Key upgrades include:
・🔁 Alignment with the updated Cybersecurity Framework (CSF 2.0)
・🛡️ Emphasis on governance, continuous improvement, and real-world procedures
・📋 Clearer roles, responsibilities, and escalation protocols
・🔍 A flexible incident response lifecycle model—fit for modern threats
・📚 Encourages tailored policies, playbooks, and training

The updated guidance moves beyond static checklists, offering a holistic view of incident handling that ties into risk management and organizational resilience.

Full details here: https://industrialcyber.co/nist/nist-publishes-sp-800-61-rev-3-overhauling-incident-response-guidance-for-csf-2-0/

#Cybersecurity #NIST #CSF2 #IncidentResponse #RiskManagement #Governance #OperationalResilience #Infosec

🚨 New from NIST: SP 800-61 Rev. 3 brings a major shift in incident response strategy.

Key upgrades include:
・🔁 Alignment with the updated Cybersecurity Framework (CSF 2.0)
・🛡️ Emphasis on governance, continuous improvement, and real-world procedures
・📋 Clearer roles, responsibilities, and escalation protocols
・🔍 A flexible incident response lifecycle model—fit for modern threats
・📚 Encourages tailored policies, playbooks, and training

The updated guidance moves beyond static checklists, offering a holistic view of incident handling that ties into risk management and organizational resilience.

Full details here: https://industrialcyber.co/nist/nist-publishes-sp-800-61-rev-3-overhauling-incident-response-guidance-for-csf-2-0/

#Cybersecurity #NIST #CSF2 #IncidentResponse #RiskManagement #Governance #OperationalResilience #Infosec

🚨 New from NIST: SP 800-61 Rev. 3 brings a major shift in incident response strategy.

Key upgrades include:
・🔁 Alignment with the updated Cybersecurity Framework (CSF 2.0)
・🛡️ Emphasis on governance, continuous improvement, and real-world procedures
・📋 Clearer roles, responsibilities, and escalation protocols
・🔍 A flexible incident response lifecycle model—fit for modern threats
・📚 Encourages tailored policies, playbooks, and training

The updated guidance moves beyond static checklists, offering a holistic view of incident handling that ties into risk management and organizational resilience.

Full details here: https://industrialcyber.co/nist/nist-publishes-sp-800-61-rev-3-overhauling-incident-response-guidance-for-csf-2-0/

#Cybersecurity #NIST #CSF2 #IncidentResponse #RiskManagement #Governance #OperationalResilience #Infosec

I was looking at the NIST CSF 2.0 draft wondering why there was so little comments for such an important document ... only 26?

But then I saw that there has indeed been quite a few comments at earlier opportunitues (during the concept paper etc). And it seems to include comments from most of the big organisations.

But it still seems like such an important document would and should have more comments. I mean a viral infosec thread on any social media probably has a magnitude more comments...

#csf2 #nist

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd

I was looking at the NIST CSF 2.0 draft wondering why there was so little comments for such an important document ... only 26?

But then I saw that there has indeed been quite a few comments at earlier opportunitues (during the concept paper etc). And it seems to include comments from most of the big organisations.

But it still seems like such an important document would and should have more comments. I mean a viral infosec thread on any social media probably has a magnitude more comments...

#csf2 #nist

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd

I was looking at the NIST CSF 2.0 draft wondering why there was so little comments for such an important document ... only 26?

But then I saw that there has indeed been quite a few comments at earlier opportunitues (during the concept paper etc). And it seems to include comments from most of the big organisations.

But it still seems like such an important document would and should have more comments. I mean a viral infosec thread on any social media probably has a magnitude more comments...

#csf2 #nist

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd

I was looking at the NIST CSF 2.0 draft wondering why there was so little comments for such an important document ... only 26?

But then I saw that there has indeed been quite a few comments at earlier opportunitues (during the concept paper etc). And it seems to include comments from most of the big organisations.

But it still seems like such an important document would and should have more comments. I mean a viral infosec thread on any social media probably has a magnitude more comments...

#csf2 #nist

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd

I was looking at the NIST CSF 2.0 draft wondering why there was so little comments for such an important document ... only 26?

But then I saw that there has indeed been quite a few comments at earlier opportunitues (during the concept paper etc). And it seems to include comments from most of the big organisations.

But it still seems like such an important document would and should have more comments. I mean a viral infosec thread on any social media probably has a magnitude more comments...

#csf2 #nist

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd

From the #csf2 draft, a recognition that #cybersecurity is not all about saying "No!." It is also about saying "Yes, and here's how!"

From the #csf2 draft, a recognition that #cybersecurity is not all about saying "No!." It is also about saying "Yes, and here's how!"

From the #csf2 draft, a recognition that #cybersecurity is not all about saying "No!." It is also about saying "Yes, and here's how!"

From the #csf2 draft, a recognition that #cybersecurity is not all about saying "No!." It is also about saying "Yes, and here's how!"

From the #csf2 draft, a recognition that #cybersecurity is not all about saying "No!." It is also about saying "Yes, and here's how!"