CYBERSECURITY GLOSSARY Malware and viruses CYBERSECURITY GLOSSARY Attacks and techniques CYBERSECURITY GLOSSARY Detection and response CYBERSECURITY GLOSSARY Identity and access CYBERSECURITY GLOSSARY Cloud and infrastructure CYBERSECURITY GLOSSARY Compliance and management CYBERSECURITY GLOSSARY Continuity and metrics CYBERSECURITY GLOSSARY Privacy and OSINT CYBERSECURITY GLOSSARY Cybersecurity
← Back to the glossary Cybersecurity glossary · Compliance and management

NIST CSF (NIST Cybersecurity Framework)

The NIST CSF (Cybersecurity Framework) is a free framework from the US National Institute of Standards and Technology that helps organize a cybersecurity program. Version 2.0 groups activities into six functions: govern, identify, protect, detect, respond and recover.

How TecnetOne handles it: TecnetGRC

NIST, NIST Cybersecurity Framework, NIST CSF 2.0, NIST framework

Related terms

Cybersecurity

Cybersecurity is the combination of technology, processes and people that protects an organization's devices, networks, applications and data from unauthorized access, theft and disruption. It covers preventing incidents, detecting them early, responding when they happen and restoring operations with the least possible impact.

View term →

Information security policy

An information security policy is the document approved by leadership that defines how the company protects its information: who is responsible, what is allowed, what is prohibited and how incidents are handled. Specific rules come from it, such as password use, remote work or data classification.

View term →

GDPR (General Data Protection Regulation)

The GDPR (General Data Protection Regulation) is the European Union law that governs how personal data of people in the EU is collected, used and protected. It also applies to US companies that offer goods or services to people in Europe or track their behavior, with fines of up to 4% of global annual revenue.

View term →

GRC (governance, risk and compliance)

GRC (governance, risk and compliance) is a way to manage three areas together that are often handled separately: who decides and under which policies, which risks the business faces and which laws and standards it must meet. Integrating them avoids duplicate controls and makes it easier to answer audits, clients and regulators.

View term →

PCI DSS

PCI DSS (Payment Card Industry Data Security Standard) is the security standard every business that processes, stores or transmits credit or debit card data must follow. It is set by the major card brands and includes requirements for firewalls, encryption, access control, monitoring and regular testing.

View term →
See all glossary terms →

Ready to put this into practice in your operation?

Tell us what you need and a TecnetOne engineer will get back to you.

Talk to an engineer