simpl.
로그인
사이버보안 GRC 18개 항목

NIST Cybersecurity Framework 2.0 Program Assessment

이 체크리스트는 영어로 제공됩니다.

Assesses a cybersecurity program against the six NIST CSF 2.0 Functions: Govern, Identify, Protect, Detect, Respond, and Recover.

NIST CSF 2.0

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Govern (GV)

  • Is a cybersecurity risk management strategy established and communicated? *
  • Are cybersecurity roles, responsibilities, and authorities defined and enforced? *
  • Is organizational cybersecurity policy established and communicated? *
  • Is cybersecurity supply chain risk management integrated into governance? *

Identify (ID)

  • Are hardware, software, and data assets inventoried and managed? *
  • Are cybersecurity risks to assets identified, analyzed, and prioritized? *
  • Are improvements identified across all CSF functions on an ongoing basis? *

Protect (PR)

  • Is identity management, authentication, and access control implemented? *
  • Is security awareness and training provided to the workforce? *
  • Is data-at-rest and data-in-transit protected consistent with the risk strategy? *
  • Are platforms managed consistent with policy (configuration, maintenance)? *

Detect (DE)

  • Are networks, assets, and systems continuously monitored for adverse events? *
  • Are potential cybersecurity incidents analyzed to characterize events? *

Respond (RS)

  • Is an incident response plan executed and coordinated during and after an incident? *
  • Are incidents analyzed to support response and recovery activities? *
  • Are response activities communicated to internal and external stakeholders? *

Recover (RC)

  • Is a recovery plan executed to restore systems affected by incidents? *
  • Are recovery activities and progress communicated to stakeholders? *

NIST Cybersecurity Framework 2.0 Program Assessment 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.