CyberStack

Knowledge / frameworks

NIST Cybersecurity Framework

Identify, Protect, Detect, Respond, Recover — plus Govern in 2.0. A common language, not a certification.

NIST CSF 2.0 + GovernGOVERNIdentifyProtectDetectRespondRecoverA loop, not a project. Govern sits over the lot.

NIST CSF is a way to talk about outcomes. Version 2.0 adds Govern as an overlay: who owns the risk, what is acceptable, how you know.

The five functions are a loop. Detect without Respond is a newsletter. Recover without backups you have tested is a speech.

Australian organisations often map CSF outcomes to Essential Eight and ISM controls so boards hear CSF and engineers still have a work list. That mapping is a cheat sheet, not a second program.