The National Institute of Standards (NIST) Cybersecurity Framework (CSF) is one of the most widely adopted frameworks to help organisations of all types to manage cybersecurity risks. The NIST CSF 2.0 is the latest version of the framework, with significant updates and enhancements to address emerging threats and challenges in the ever more complex cyberspace.
Thales can help organisations comply with the NIST CSF 2.0 by addressing essential cybersecurity requirements and automating security, reducing the burden on security and compliance teams.
Identify and manage risks
Gain visibility, control and insight over risks to sensitive data and assets.
Automate protection
Protect applications, data and identities automatically based on policy across hybrid IT.
Mitigate and respond to attacks
Monitor for abnormal activities and mitigate attacks in real time.
eBook
How Thales helps organisations adopt the NIST Cybersecurity Framework 2.0
Thales helps organisations comply with NIST Cybersecurity Framework 2.0 with comprehensive cyber security solutions in three key areas of cybersecurity: Application Security, Data Security and Identity & Access Management.
What is the NIST CSF 2?
The National Institute of Standards (NIST) Cybersecurity Framework (CSF) 2.0 provides private and public organisations with guidance on how to manage cybersecurity risks. The NIST CSF 2.0 is not a mandate, but it is a voluntary guideline widely used globally to help organisations manage and improve cybersecurity practices.
WHITE PAPER
Data Security: A Critical Component of NIST Cybersecurity Framework 2.0
Your NIST CSF 2.0 strategy must include a data security strategy that delivers sensitive data discovery, data classification and data analysis. This paper discusses the role data security plays in aligning to the NIST CSF 2.0 framework.
Related resources
Other key data protection and security regulations
PCI HSM
MANDATE | ACTIVE NOW
The PCI HSM specification defines a set of logical and physical security compliance standards for HSMs specifically for the payments industry. PCI HSM Compliance certification depends on meeting those standards.
DORA
REGULATION | ACTIVE NOW
DORA aims to strengthen the IT security of financial entities to ensure the financial sector in Europe is resilient in the face of the growing volume and severity of cyber-attacks.
Data breach notification laws
REGULATION | ACTIVE NOW
Data breach notification requirements following loss of personal information have been enacted by nations around the globe. They vary by jurisdiction, but almost universally include a "safe harbour" clause.
GLBA
REGULATION | ACTIVE NOW
The Gramm-Leach-Bliley Act (GLBA)--also known as the Financial Services Modernization Act of 1999--requires financial institutions to explain their information-sharing practices to their customers and to safeguard sensitive data.