Mini Capsules

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 14 - Detect – Anomalies and Events (DE.AE) 

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Anomalies and Events (DE.AE) de la fonction Detect du NIST cybersecurity framework. 

NIST CSF DE.AE-1: A baseline of network operations and expected data flows for users and systems is established and managed 

NIST CSF DE.AE-2: Detected events are analyzed to understand attack targets and methods 

NIST CSF DE.AE-3: Event data are collected and correlated from multiple sources and sensors 

NIST CSF DE.AE-4: Impact of events is determined 

NIST CSF DE.AE-5: Incident alert thresholds are established 

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas! 

 

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2   

Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4    

 

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 13 - Protect – Protective Technology (PR.PT)

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Protective Technology (PR.PT) de la fonction Protect du NIST cybersecurity framework.

NIST CSF PR.PT-1: Audit/log records are determined, documented, implemented, and reviewed in accordance with policy

NIST CSF PR.PT-2: Removable media is protected and its use restricted according to policy

NIST CSF PR.PT-3: The principle of least functionality is incorporated by configuring systems to provide only essential capabilities

NIST CSF PR.PT-4: Communications and control networks are protected

NIST CSF PR.PT-5: Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2  

Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4   

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Maintenance (PR.MA) de la fonction Protect du NIST cybersecurity framework.

NIST CSF PR.MA-1: Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools

NIST CSF PR.MA-2: Remote maintenance of organizational assets is approved, logged, and performed in a manner that prevents unauthorized access

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2  

Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4   

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 11 - Protect – Information Protection Processes and Procedures (PR.IP) 

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Information Protection Processes and Procedures (PR.IP) de la fonction Protect  du NIST cybersecurity framework.

NIST CSF PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality

NIST CSF PR.IP-2: A System Development Life Cycle to manage systems is implemented

NIST CSF PR.IP-3: Configuration change control processes are in place

NIST CSF PR.IP-4: Backups of information are conducted, maintained, and tested 

NIST CSF PR.IP-5: Policy and regulations regarding the physical operating environment for organizational assets are met

NIST CSF PR.IP-6: Data is destroyed according to policy

NIST CSF PR.IP-7: Protection processes are improved

NIST CSF PR.IP-8: Effectiveness of protection technologies is shared 

NIST CSF PR.IP-9: Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed

NIST CSF PR.IP-10: Response and recovery plans are tested

NIST CSF PR.IP-11: Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)

NIST CSF PR.IP-12: A vulnerability management plan is developed and implemented

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2  

Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4   

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 10 - Protect – Data Security (PR.DS)

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Data Security (PR.DS) de la fonction Protect du NIST cybersecurity framework.

NIST CSF PR.DS-1: Data-at-rest is protected

NIST CSF PR.DS-2: Data-in-transit is protected

NIST CSF PR.DS-3: Assets are formally managed throughout removal, transfers, and disposition

NIST CSF PR.DS-4: Adequate capacity to ensure availability is maintained

NIST CSF PR.DS-5: Protections against data leaks are implemented

NIST CSF PR.DS-6: Integrity checking mechanisms are used to verify software, firmware, and information integrity

NIST CSF PR.DS-7: The development and testing environment(s) are separate from the production environment

 Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!
 
 

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2
Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4  

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 9 - Protect - Awareness and Training (PR.AT)

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Identity Management and Access Control (PR.AC) de la fonction Protect du NIST cybersecurity framework.

NIST CSF PR.AT-1: All users are informed and trained 

NIST CSF PR.AT-2: Privileged users understand roles & responsibilities 

NIST CSF PR.AT-3: Third-party stakeholders (e.g., suppliers, customers, partners) understand roles & responsibilities 

NIST CSF PR.AT-4: Senior executives understand roles & responsibilities 

NIST CSF PR.AT-5: Physical and information security personnel understand roles & responsibilities 

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!
 
 

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2
Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4  

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 8 - Protect – Identity Management and Access Control (PR.AC)
 
 

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Identity Management and Access Control (PR.AC) de la fonction Protect du NIST cybersecurity framework.
 
NIST CSF PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes

NIST CSF PR.AC-2: Physical access to assets is managed and protected

NIST CSF PR.AC-3: Remote access is managed

NIST CSF PR.AC-4: Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties

NIST CSF PR.AC-5: Network integrity is protected (e.g., network segregation, network segmentation)

NIST CSF PR.AC-6: Identities are proofed and bound to credentials and asserted in interactions

NIST CSF PR.AC-7: Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals’ security and privacy risks and other organizational risks)

 Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!
 

Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2
Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4  

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 7 - Identify – Supply Chain Risk Management (ID.SC)

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Supply Chain Risk Management (ID.SC) de la fonction Identify du NIST cybersecurity framework.

NIST ID.SC-1: Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders

NIST ID.SC-2: Suppliers and third-party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process 

NIST ID.SC-3: Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.

NIST ID.SC-4: Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.

NIST ID.SC-5: Response and recovery planning and testing are conducted with suppliers and third-party providers

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!
 Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2
Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4 

Mini-Capsules - NIST Cybersecurity Framework (NIST CSF) - Episode 6 - Identify – Risk Management Strategy

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Risk Management Strategy de la fonction Identify du NIST cybersecurity framework.

NIST CSF ID.BE-1: Risk management processes are established, managed, and agreed to by organizational stakeholders.

NIST CSF ID.BE-2: Organizational risk tolerance is determined and clearly expressed.

NIST CSF ID.BE-3: The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis.

Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas!
 Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2
Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4 

Capsules vidéo - NIST Cybersecurity Framework (NIST CSF) - Episode 5 - Identify – Risk assessment

Dans l'épisode d'aujourd'hui, Frederic Deneault vulgarise les contrôles de la catégorie Risk Assessment de la fonction Identify du NIST cybersecurity framework. 

NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented.

NIST CSF ID.RA-2: Threat and vulnerability information is received from information sharing forums and sources.

NIST CSF ID.RA-3: Threats, both internal and external, are identified and documented.

NIST CSF ID.RA-4: Potential business impacts and likelihoods are identified.

NIST CSF ID.RA-5: Threats, vulnerabilities, likelihoods, and impacts are used to determine risk.

NIST CSF ID.RA-6: Risk responses are identified and prioritized.

 Si vous avez des questions ou vous voulez partager votre opinion, n'hésitez pas! Abonnez-vous à notre chaîne Youtube! Suivez-moi sur LinkedIn: - Frederic Deneault https://bit.ly/38BEZp2 - Le podcast Discutons Gouvernance https://bit.ly/2YdfJn4