We introduced the NIST Cybersecurity Framework in a previous article, which you can read here. In this article, we will take you further into the cycle, to the identify function.
THE FOUNDATION
Identify is the first step of the NIST Cybersecurity Framework and forms the foundation of the model. It allows you to map out your organizational environment, identify which assets support critical functions, and determine where the associated cybersecurity risks lie. Once this is clear, you have a complete overview of your environment, allowing you to create focus and prioritize your efforts. All of this, of course, in accordance with your established risk management strategy and organizational requirements. To reach this comprehensive overview, you take the following five steps:
1. Asset management: research and describe what you have;
2. Business environment: research and describe the environment in which something is located;
3. Governance: research and describe the policies and regulations that must be met;
4. Risk assessment: research and describe how to assess and interpret risks;
5. Risk management strategy: describe how you handle risks.
The image below visually represents where these components fit into the identify phase.
You start with your assets and determine which are critical within your business environment, or your organizational (Cloud) environment. You also have to deal with external rules and regulations. These are researched and described in the governance section, which outlines the policies and regulations your organization must comply with. You then perform a risk assessment on this entire set of assets, business environment, and governance. This gives you a clear picture of the risks to your organization. You then establish a risk management strategy that determines how you will handle these risks. This results in measures that you carry over to the protect phase; the next step in the NIST Cybersecurity Framework.
STAYING IN MOTION
Identify is not a one-time task. The NIST Cybersecurity Framework is a cycle for a reason. Due to continuous developments both within and outside your organization, your organizational (Cloud) environment is constantly changing. An employee might open a network port (to temporarily establish a connection), or a software version might prove vulnerable and be widely exploited overnight. If you want to know where the risks lie, it is essential to keep the data from the identify phase up to date.
MONITORING
Your data is only as current as the moment you performed the analysis. You must continuously monitor the status of your Cloud environment and organization. Of course, you cannot keep your eyes on your environment 24/7. Automated monitoring can help with this. For example, with the Vulnerability management solution from Fundaments, you gain simple, periodic, and clear insight into the status of your environment, helping you avoid unpleasant surprises. Would you like to know more about Vulnerability management or the Identify phase? Please contact us by calling 088 4 227 227 or emailing info@fundaments.nl.
