Three’s Company: Unpacking and Settling in with Three NIST Frameworks
summary
Compares three NIST frameworks and shows how to turn 108 CSF subcategories and a 450‑control RMF baseline into actionable priorities using Daisy chart mission objectives and dot‑charts for scoring; demonstrates tailoring, overlays and that one new system’s baseline drops to 11 critical controls (one, SC-6, was missing and needs adding); maps profiles to RMF steps (prepare → monitor) and uses the Coast Guard oil‑transfer and a dynamic flight‑routing example to prove profiles cut scope and guide assessment, monitoring and budgeted implementation.
AI-written summary · about
chapters (8)
- 0:00Introduction and context
- 1:57NIST framework overviews
- 3:25Core framework structure
- 6:47Risk management framework
- 9:14Framework profiles
- 18:39Security and privacy controls
- 23:46Linking frameworks and RMF
- 26:40Practical implementation example
related talks
57mGRC & The Min & Max of Multi-Framework Optimization
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
29mMeasuring Cybersecurity Maturity with the NIST CSF
42mStrategic Implementation of the NIST Risk Management Framework (RMF)
01h 29mFrameworks and Related Standards
44m"Connecting the Dots" of NIST 800-207, TIC 3.0, and More Using SAFE
49mNIST Cybersecurity Framework v2.0: What’s changing?
50mIt’s a Journey…Where is NIST Headed with the Cybersecurity Framework