Glossary: Policies, Standards and Risk Management

NIST Cybersecurity Framework (CSF) 2.0

Also written: CSF 2.0, CSF, Cybersecurity Framework

NIST's framework for managing cybersecurity. Its Govern function includes setting policy, and it asks organizations to set and communicate risk appetite and tolerance statements.

Where the book teaches it

Chapter 2: Procedures, Plans and the First Policies
Chapter 6: Business-Level Risk Decisions

Related terms

NIST (National Institute of Standards and Technology)risk appetite risk tolerance information security policy