NIST Cybersecurity Framework Certification

Module 1: Introduction to the NIST Cybersecurity Framework

• Cybersecurity risk fundamentals
• NIST CSF purpose
• Framework evolution
• CSF 2.0 overview
• Organizational applications
• Framework structure

Module 2: Understanding NIST CSF 2.0

• CSF Core
• Organizational Profiles
• CSF Tiers
• Functions
• Categories
• Subcategories

Module 3: Cybersecurity Risk Management

• Risk identification
• Threat assessment
• Vulnerability assessment
• Business impact
• Risk prioritization
• Risk treatment

Module 4: Organizational Profiles

• Profile concepts
• Current Profile
• Target Profile
• Profile development
• Gap identification
• Improvement planning

Module 5: CSF Tiers

• Tier concepts
• Risk management practices
• Organizational maturity
• Tier selection
• Capability evaluation
• Improvement strategies

Module 6: Govern Function

• Organizational context
• Risk management strategy
• Roles and responsibilities
• Policies
• Oversight
• Supply chain risk management

Module 7: Governance & Cybersecurity Strategy

• Security governance
• Business alignment
• Leadership involvement
• Risk ownership
• Security policies
• Strategic planning

Module 8: Identify Function

• Asset management
• Risk assessment
• Improvement activities
• Business environment
• Threat identification
• Vulnerability awareness

Module 9: Asset Management

• Hardware assets
• Software assets
• Data assets
• Asset inventories
• Asset classification
• Asset prioritization

Module 10: Cybersecurity Risk Assessment

• Threat identification
• Vulnerability analysis
• Likelihood assessment
• Impact assessment
• Risk determination
• Risk prioritization

Module 11: Protect Function

• Identity management
• Access control
• Data security
• Platform security
• Technology infrastructure resilience
• Security awareness

Module 12: Identity & Access Protection

• Authentication
• Authorization
• Least privilege
• Multi-Factor Authentication
• Privileged access
• Access reviews

Module 13: Data & Infrastructure Protection

• Data security
• Encryption
• Secure configurations
• Network protection
• Backup practices
• Infrastructure resilience

Module 14: Detect Function

• Continuous monitoring
• Adverse event analysis
• Security monitoring
• Log analysis
• Threat detection
• Event correlation

Module 15: Security Monitoring & Detection

• Monitoring strategy
• Network monitoring
• Endpoint monitoring
• Security alerts
• Detection processes
• Continuous visibility

Module 16: Respond Function

• Incident management
• Incident analysis
• Communication
• Mitigation
• Reporting
• Response coordination

Module 17: Cybersecurity Incident Response

• Incident identification
• Incident prioritization
• Investigation
• Containment
• Mitigation
• Post-incident activities

Module 18: Recover Function

• Recovery planning
• Recovery execution
• Restoration activities
• Recovery communication
• Operational resilience
• Continuous improvement

Module 19: Supply Chain Cybersecurity Risk

• Supplier risks
• Third-party assessment
• Vendor security
• Risk monitoring
• Supplier requirements
• Supply chain resilience

Module 20: NIST CSF Gap Assessment

• Current-state assessment
• Target-state definition
• Control gaps
• Risk prioritization
• Improvement actions
• Roadmap development

Module 21: NIST CSF Implementation

• Implementation planning
• Stakeholder engagement
• Resource prioritization
• Security initiatives
• Progress measurement
• Continuous improvement

Module 22: Practical NIST CSF Application

• Organizational scenario
• Profile development
• Risk assessment
• Gap analysis
• Implementation roadmap
• Performance review