A voluntary framework published by the National Institute of Standards and Technology providing guidelines for organizations to manage cybersecurity risk. The framework organizes activities into five functions: Identify, Protect, Detect, Respond, and Recover.
Related Terms
ISO 27001
complianceAn international standard for information security management systems (ISMS). ISO 27001 provides a systematic approach t...
Risk Assessment
complianceThe systematic process of identifying, analyzing, and evaluating security risks to an organization's assets. Risk assess...
SOC 2
complianceA compliance framework developed by AICPA that evaluates an organization's controls related to security, availability, p...