NIST Cyber Security Framework

NIST is the US federal organisation responsible for providing technical leadership and globally it is considered one of the pre-eminent sources of cyber security guidelines, recommendations and reference materials.

The NIST Cybersecurity Framework provides a policy framework for organisations to assess and improve their ability to prevent, detect, and respond to cyber attacks.  Since NIST released the Cybersecurity Framework in 2013, it has been widely adopted globally as a benchmark cyber security standard.

Ignite cyber security framework

The Ignite Systems Cyber Security Framework is an adoption of the globally recognised NIST (National Institute of Standards and Technology) Cyber Security Framework.  This framework emphasises the importance of a risk management approach and has been designed for use with small businesses in any sector.

The Ignite Systems Cyber Security Framework details a comprehensive set of arrangements intended to provide a small business with a level of security for their information, systems, and networks, based on current cyber security best practices.  It is the basis for the development and delivery of the Ignite Systems technology management services, and it also forms the basis for the Ignite Systems Cyber Security Risk Report.

Consistent with the NIST Cyber Security Framework, the Ignite Systems Cyber Security Framework comprises five areas of focus that form the security life cycle; Identify, Protect, Detect, Respond and Recover. These five categories are further broken down into sub-categories, as shown in this diagram.

Identify – An understanding of the cyber security risks in relation to systems, assets, data, and capabilities.

Protect – Measures to protect and maintain critical infrastructure services.

Detect – Processes to identify the occurrence of a cyber security event.

Respond – Arrangements to act regarding the detection of a possible cyber security event.

Recover – Plans and restoration procedures to reinstate capabilities or services impaired due to a cybersecurity event.