3 Nist Csf And Maturity Models With Joel Langill

Joel ’SCADAHacker’ Langill of amentum (formerly AECOM) gives the session on ICS Security Frameworks and Maturity Models.

The main focus is on the US NIST Cybersecurity Framework. While this is a US developed Framework, it is being used in other countries as well. Joel not only covers what the Framework is. Importantly he goes into detail on how he uses the NISF CSF and shows another freely available tool. The video also provides some detail on C2M2 and CMMC and compares them to NIST CSF.

Joel closes with information on the DHS CISA CSET tool, how to customize it, and then some Q&A.

Questions:

1) Do you use a Framework to structure your cyber security program? If yes, which Framework and why? Does your industry have a Profile for the NIST CSF?

2) Can you be compliant to a Framework? Why or why not? (admittedly there is disagreement on the answer to this question)

Note - I have some more detailed info on how I use the NIST CSF coming out here on Tuesday in an audio file, and I'll be happy to answer any questions.