Sort the work into CSF functions
Classify common CISO activities into the six NIST CSF 2.0 functions.
Place each security activity into its primary NIST CSF 2.0 function. Govern Identify Protect Detect Respond Recover Set risk appetite and name executive owners for crown-jewel systems Map critical vendors to the business processes and data they support Require phishing-resistant MFA for production administrators Tune detection logic for suspicious credential dumping behavior Activate incident command, scribe, legal, and communications roles Run a restore test for the customer billing database and record RTO result Review cyber policy exceptions with the risk committee Reconcile internet-facing assets against cloud accounts and DNS records Restrict lateral movement from employee workstations to server networks
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in