How the NIST Cybersecurity Framework Works: Tiers, Profiles, Functions and Categories

1/25/2018 11:00:00 AM [(UTC-05:00) Eastern Time (US & Canada)] - Can't make the live event? Register anyway to receive a link to the recording.

Other Time Zones

GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London    1/25/2018 4:00:00 PM
Show/Hide All Time Zones

All Time Zones

Dateline Standard Time-(UTC-12:00) International Date Line West 1/25/2018 4:00:00 AM
UTC-11-(UTC-11:00) Coordinated Universal Time-11 1/25/2018 5:00:00 AM
Aleutian Standard Time-(UTC-10:00) Aleutian Islands 1/25/2018 6:00:00 AM
Hawaiian Standard Time-(UTC-10:00) Hawaii 1/25/2018 6:00:00 AM
Marquesas Standard Time-(UTC-09:30) Marquesas Islands 1/25/2018 6:30:00 AM
Alaskan Standard Time-(UTC-09:00) Alaska 1/25/2018 7:00:00 AM
UTC-09-(UTC-09:00) Coordinated Universal Time-09 1/25/2018 7:00:00 AM
Pacific Standard Time (Mexico)-(UTC-08:00) Baja California 1/25/2018 8:00:00 AM
UTC-08-(UTC-08:00) Coordinated Universal Time-08 1/25/2018 8:00:00 AM
Pacific Standard Time-(UTC-08:00) Pacific Time (US & Canada) 1/25/2018 8:00:00 AM
US Mountain Standard Time-(UTC-07:00) Arizona 1/25/2018 9:00:00 AM
Mountain Standard Time (Mexico)-(UTC-07:00) Chihuahua, La Paz, Mazatlan 1/25/2018 9:00:00 AM
Mountain Standard Time-(UTC-07:00) Mountain Time (US & Canada) 1/25/2018 9:00:00 AM
Central America Standard Time-(UTC-06:00) Central America 1/25/2018 10:00:00 AM
Central Standard Time-(UTC-06:00) Central Time (US & Canada) 1/25/2018 10:00:00 AM
Easter Island Standard Time-(UTC-06:00) Easter Island 1/25/2018 11:00:00 AM
Central Standard Time (Mexico)-(UTC-06:00) Guadalajara, Mexico City, Monterrey 1/25/2018 10:00:00 AM
Canada Central Standard Time-(UTC-06:00) Saskatchewan 1/25/2018 10:00:00 AM
SA Pacific Standard Time-(UTC-05:00) Bogota, Lima, Quito, Rio Branco 1/25/2018 11:00:00 AM
Eastern Standard Time (Mexico)-(UTC-05:00) Chetumal 1/25/2018 11:00:00 AM
Eastern Standard Time-(UTC-05:00) Eastern Time (US & Canada) 1/25/2018 11:00:00 AM
Haiti Standard Time-(UTC-05:00) Haiti 1/25/2018 11:00:00 AM
Cuba Standard Time-(UTC-05:00) Havana 1/25/2018 11:00:00 AM
US Eastern Standard Time-(UTC-05:00) Indiana (East) 1/25/2018 11:00:00 AM
Paraguay Standard Time-(UTC-04:00) Asuncion 1/25/2018 1:00:00 PM
Atlantic Standard Time-(UTC-04:00) Atlantic Time (Canada) 1/25/2018 12:00:00 PM
Venezuela Standard Time-(UTC-04:00) Caracas 1/25/2018 12:00:00 PM
Central Brazilian Standard Time-(UTC-04:00) Cuiaba 1/25/2018 1:00:00 PM
SA Western Standard Time-(UTC-04:00) Georgetown, La Paz, Manaus, San Juan 1/25/2018 12:00:00 PM
Pacific SA Standard Time-(UTC-04:00) Santiago 1/25/2018 1:00:00 PM
Turks And Caicos Standard Time-(UTC-04:00) Turks and Caicos 1/25/2018 12:00:00 PM
Newfoundland Standard Time-(UTC-03:30) Newfoundland 1/25/2018 12:30:00 PM
Tocantins Standard Time-(UTC-03:00) Araguaina 1/25/2018 1:00:00 PM
E. South America Standard Time-(UTC-03:00) Brasilia 1/25/2018 2:00:00 PM
SA Eastern Standard Time-(UTC-03:00) Cayenne, Fortaleza 1/25/2018 1:00:00 PM
Argentina Standard Time-(UTC-03:00) City of Buenos Aires 1/25/2018 1:00:00 PM
Greenland Standard Time-(UTC-03:00) Greenland 1/25/2018 1:00:00 PM
Montevideo Standard Time-(UTC-03:00) Montevideo 1/25/2018 1:00:00 PM
Magallanes Standard Time-(UTC-03:00) Punta Arenas 1/25/2018 1:00:00 PM
Saint Pierre Standard Time-(UTC-03:00) Saint Pierre and Miquelon 1/25/2018 1:00:00 PM
Bahia Standard Time-(UTC-03:00) Salvador 1/25/2018 1:00:00 PM
UTC-02-(UTC-02:00) Coordinated Universal Time-02 1/25/2018 2:00:00 PM
Mid-Atlantic Standard Time-(UTC-02:00) Mid-Atlantic - Old 1/25/2018 2:00:00 PM
Azores Standard Time-(UTC-01:00) Azores 1/25/2018 3:00:00 PM
Cape Verde Standard Time-(UTC-01:00) Cabo Verde Is. 1/25/2018 3:00:00 PM
UTC-(UTC) Coordinated Universal Time 1/25/2018 4:00:00 PM
Morocco Standard Time-(UTC+00:00) Casablanca 1/25/2018 4:00:00 PM
GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London 1/25/2018 4:00:00 PM
Greenwich Standard Time-(UTC+00:00) Monrovia, Reykjavik 1/25/2018 4:00:00 PM
W. Europe Standard Time-(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna 1/25/2018 5:00:00 PM
Central Europe Standard Time-(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague 1/25/2018 5:00:00 PM
Romance Standard Time-(UTC+01:00) Brussels, Copenhagen, Madrid, Paris 1/25/2018 5:00:00 PM
Central European Standard Time-(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb 1/25/2018 5:00:00 PM
W. Central Africa Standard Time-(UTC+01:00) West Central Africa 1/25/2018 5:00:00 PM
Namibia Standard Time-(UTC+01:00) Windhoek 1/25/2018 6:00:00 PM
Jordan Standard Time-(UTC+02:00) Amman 1/25/2018 6:00:00 PM
GTB Standard Time-(UTC+02:00) Athens, Bucharest 1/25/2018 6:00:00 PM
Middle East Standard Time-(UTC+02:00) Beirut 1/25/2018 6:00:00 PM
Egypt Standard Time-(UTC+02:00) Cairo 1/25/2018 6:00:00 PM
E. Europe Standard Time-(UTC+02:00) Chisinau 1/25/2018 6:00:00 PM
Syria Standard Time-(UTC+02:00) Damascus 1/25/2018 6:00:00 PM
West Bank Standard Time-(UTC+02:00) Gaza, Hebron 1/25/2018 6:00:00 PM
South Africa Standard Time-(UTC+02:00) Harare, Pretoria 1/25/2018 6:00:00 PM
FLE Standard Time-(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius 1/25/2018 6:00:00 PM
Israel Standard Time-(UTC+02:00) Jerusalem 1/25/2018 6:00:00 PM
Kaliningrad Standard Time-(UTC+02:00) Kaliningrad 1/25/2018 6:00:00 PM
Sudan Standard Time-(UTC+02:00) Khartoum 1/25/2018 6:00:00 PM
Libya Standard Time-(UTC+02:00) Tripoli 1/25/2018 6:00:00 PM
Arabic Standard Time-(UTC+03:00) Baghdad 1/25/2018 7:00:00 PM
Turkey Standard Time-(UTC+03:00) Istanbul 1/25/2018 7:00:00 PM
Arab Standard Time-(UTC+03:00) Kuwait, Riyadh 1/25/2018 7:00:00 PM
Belarus Standard Time-(UTC+03:00) Minsk 1/25/2018 7:00:00 PM
Russian Standard Time-(UTC+03:00) Moscow, St. Petersburg, Volgograd 1/25/2018 7:00:00 PM
E. Africa Standard Time-(UTC+03:00) Nairobi 1/25/2018 7:00:00 PM
Iran Standard Time-(UTC+03:30) Tehran 1/25/2018 7:30:00 PM
Arabian Standard Time-(UTC+04:00) Abu Dhabi, Muscat 1/25/2018 8:00:00 PM
Astrakhan Standard Time-(UTC+04:00) Astrakhan, Ulyanovsk 1/25/2018 8:00:00 PM
Azerbaijan Standard Time-(UTC+04:00) Baku 1/25/2018 8:00:00 PM
Russia Time Zone 3-(UTC+04:00) Izhevsk, Samara 1/25/2018 8:00:00 PM
Mauritius Standard Time-(UTC+04:00) Port Louis 1/25/2018 8:00:00 PM
Saratov Standard Time-(UTC+04:00) Saratov 1/25/2018 8:00:00 PM
Georgian Standard Time-(UTC+04:00) Tbilisi 1/25/2018 8:00:00 PM
Caucasus Standard Time-(UTC+04:00) Yerevan 1/25/2018 8:00:00 PM
Afghanistan Standard Time-(UTC+04:30) Kabul 1/25/2018 8:30:00 PM
West Asia Standard Time-(UTC+05:00) Ashgabat, Tashkent 1/25/2018 9:00:00 PM
Ekaterinburg Standard Time-(UTC+05:00) Ekaterinburg 1/25/2018 9:00:00 PM
Pakistan Standard Time-(UTC+05:00) Islamabad, Karachi 1/25/2018 9:00:00 PM
India Standard Time-(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi 1/25/2018 9:30:00 PM
Sri Lanka Standard Time-(UTC+05:30) Sri Jayawardenepura 1/25/2018 9:30:00 PM
Nepal Standard Time-(UTC+05:45) Kathmandu 1/25/2018 9:45:00 PM
Central Asia Standard Time-(UTC+06:00) Astana 1/25/2018 10:00:00 PM
Bangladesh Standard Time-(UTC+06:00) Dhaka 1/25/2018 10:00:00 PM
Omsk Standard Time-(UTC+06:00) Omsk 1/25/2018 10:00:00 PM
Myanmar Standard Time-(UTC+06:30) Yangon (Rangoon) 1/25/2018 10:30:00 PM
SE Asia Standard Time-(UTC+07:00) Bangkok, Hanoi, Jakarta 1/25/2018 11:00:00 PM
Altai Standard Time-(UTC+07:00) Barnaul, Gorno-Altaysk 1/25/2018 11:00:00 PM
W. Mongolia Standard Time-(UTC+07:00) Hovd 1/25/2018 11:00:00 PM
North Asia Standard Time-(UTC+07:00) Krasnoyarsk 1/25/2018 11:00:00 PM
N. Central Asia Standard Time-(UTC+07:00) Novosibirsk 1/25/2018 11:00:00 PM
Tomsk Standard Time-(UTC+07:00) Tomsk 1/25/2018 11:00:00 PM
China Standard Time-(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi 1/26/2018 12:00:00 AM
North Asia East Standard Time-(UTC+08:00) Irkutsk 1/26/2018 12:00:00 AM
Singapore Standard Time-(UTC+08:00) Kuala Lumpur, Singapore 1/26/2018 12:00:00 AM
W. Australia Standard Time-(UTC+08:00) Perth 1/26/2018 12:00:00 AM
Taipei Standard Time-(UTC+08:00) Taipei 1/26/2018 12:00:00 AM
Ulaanbaatar Standard Time-(UTC+08:00) Ulaanbaatar 1/26/2018 12:00:00 AM
North Korea Standard Time-(UTC+08:30) Pyongyang 1/26/2018 12:30:00 AM
Aus Central W. Standard Time-(UTC+08:45) Eucla 1/26/2018 12:45:00 AM
Transbaikal Standard Time-(UTC+09:00) Chita 1/26/2018 1:00:00 AM
Tokyo Standard Time-(UTC+09:00) Osaka, Sapporo, Tokyo 1/26/2018 1:00:00 AM
Korea Standard Time-(UTC+09:00) Seoul 1/26/2018 1:00:00 AM
Yakutsk Standard Time-(UTC+09:00) Yakutsk 1/26/2018 1:00:00 AM
Cen. Australia Standard Time-(UTC+09:30) Adelaide 1/26/2018 2:30:00 AM
AUS Central Standard Time-(UTC+09:30) Darwin 1/26/2018 1:30:00 AM
E. Australia Standard Time-(UTC+10:00) Brisbane 1/26/2018 2:00:00 AM
AUS Eastern Standard Time-(UTC+10:00) Canberra, Melbourne, Sydney 1/26/2018 3:00:00 AM
West Pacific Standard Time-(UTC+10:00) Guam, Port Moresby 1/26/2018 2:00:00 AM
Tasmania Standard Time-(UTC+10:00) Hobart 1/26/2018 3:00:00 AM
Vladivostok Standard Time-(UTC+10:00) Vladivostok 1/26/2018 2:00:00 AM
Lord Howe Standard Time-(UTC+10:30) Lord Howe Island 1/26/2018 3:00:00 AM
Bougainville Standard Time-(UTC+11:00) Bougainville Island 1/26/2018 3:00:00 AM
Russia Time Zone 10-(UTC+11:00) Chokurdakh 1/26/2018 3:00:00 AM
Magadan Standard Time-(UTC+11:00) Magadan 1/26/2018 3:00:00 AM
Norfolk Standard Time-(UTC+11:00) Norfolk Island 1/26/2018 3:00:00 AM
Sakhalin Standard Time-(UTC+11:00) Sakhalin 1/26/2018 3:00:00 AM
Central Pacific Standard Time-(UTC+11:00) Solomon Is., New Caledonia 1/26/2018 3:00:00 AM
Russia Time Zone 11-(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky 1/26/2018 4:00:00 AM
New Zealand Standard Time-(UTC+12:00) Auckland, Wellington 1/26/2018 5:00:00 AM
UTC+12-(UTC+12:00) Coordinated Universal Time+12 1/26/2018 4:00:00 AM
Fiji Standard Time-(UTC+12:00) Fiji 1/26/2018 4:00:00 AM
Kamchatka Standard Time-(UTC+12:00) Petropavlovsk-Kamchatsky - Old 1/26/2018 4:00:00 AM
Chatham Islands Standard Time-(UTC+12:45) Chatham Islands 1/26/2018 5:45:00 AM
UTC+13-(UTC+13:00) Coordinated Universal Time+13 1/26/2018 5:00:00 AM
Tonga Standard Time-(UTC+13:00) Nuku'alofa 1/26/2018 5:00:00 AM
Samoa Standard Time-(UTC+13:00) Samoa 1/26/2018 6:00:00 AM
Line Islands Standard Time-(UTC+14:00) Kiritimati Island 1/26/2018 6:00:00 AM

Webinar Registration

Security frameworks and standards can be the blessing or the malediction. On the one hand we need a standardized way of looking at and communicating about security and a common yard stick for assessing an organization’s security stance, gap analysis and comparing organizations. On the other hand, security standards can be voluminous piles of paper that everyone talks about and no one reads, let alone actually implements. 

The National Institute of Standards and Technology has a good reputation for producing workable standards that people actually use, and their newly updated Framework for Improving Critical Infrastructure Cybersecurity has become the defining standard not just for organizations in the federal space required to use it, but also by voluntary implementers in the local government or private sector.

The Framework document is short enough for anyone to get their arms around it, and the good news is that you can start using the framework in tentative steps and before adoption by your entire organization.

The key is understanding the structure of the framework and how it’s intended to be used.

If you are technical like me, go straight to the good stuff – literally called the “Core” – in Appendix A. Core is divided into 5 top level Functions:

  • ID – Identify: Develop an organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities
  • PR – Protect: Develop and implement appropriate safeguards to ensure delivery of critical infrastructure services
  • DE – Detect: Develop and implement appropriate activities to identify the occurrence of a cybersecurity event
  • RS – Respond: Develop and implement appropriate activities to take action regarding a detected cybersecurity incident
  • RC – Recover: Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.

If you are like me, Protect and especially Detect are most interesting. Detect is broken into 3 categories:

  • Anomalies and Events
  • Security Continuous Monitoring
  • Detection Processes

Those 3 categories are divided into smaller subcategories and each subcategory is mapped to detailed guidelines in popular security standards like COBIT, ISO 27001, CIS CSC and NIST 800-53. 

But the Framework is more than this core set of security controls. The value of the Framework really comes into focus when you understand how to use Profiles and Implementation Tiers. 

Implementation tiers measure how close your practices are to the Framework, and Profiles help you keep track of what parts of the Framework you have decided to work on, where you currently are and where you want to be.

In this real training for free webinar, I will open up the actual Framework document and take you through it online. Then we will pivot to Bryan Patton from Quest who will take a specific security issue like Pass-the-Hash attacks and show you how to bring the Cybersecurity Framework to bear on it.

We will also explain what’s changed in this most recent version of the Framework. For instance, this revision draws attention to the very real issue of software, hardware and service supply chain risks.

Please join us for this real training for free event to understand how to make quick and practical use of the Framework in small, tactical projects, as well as your larger, more strategic initiatives.

First Name:   
Last Name:   
Work Email:  
Phone:  
Job Title:  
Organization:  
Country:    
Address:  
City:  
State:  
Zip/Postal Code:  
Public sector:
 

Your information will be shared with the sponsor.


 

 

Additional Resources