Security frameworks overview (NIST, ISO 27001) in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of the NIST Cybersecurity Framework?

The NIST Cybersecurity Framework helps organizations manage and reduce cybersecurity risks by providing guidelines and best practices for identifying, protecting, detecting, responding to, and recovering from cyber threats.

beginner

What does ISO 27001 focus on in an organization?

ISO 27001 focuses on establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS) to protect sensitive information systematically.

intermediate

Name the five core functions of the NIST Cybersecurity Framework.

The five core functions are: Identify, Protect, Detect, Respond, and Recover. These help organizations structure their cybersecurity efforts.

intermediate

How does ISO 27001 certification benefit an organization?

ISO 27001 certification shows that an organization follows international standards for managing information security, which can build trust with customers, reduce risks, and meet legal or regulatory requirements.

advanced

What is a key difference between NIST and ISO 27001 frameworks?

NIST provides a flexible framework mainly used in the US with detailed cybersecurity guidelines, while ISO 27001 is an international standard focused on creating a formal management system for information security.

Which of the following is NOT one of the NIST Cybersecurity Framework core functions?

A Analyze

B Protect

C Identify

D Recover

The five core functions are Identify, Protect, Detect, Respond, and Recover. 'Analyze' is not one of them.

ISO 27001 is primarily concerned with:

A Information Security Management System

B Software development lifecycle

C Network hardware configuration

D Cybersecurity incident response

ISO 27001 focuses on establishing and maintaining an Information Security Management System (ISMS).

Which framework is widely used in the United States for cybersecurity risk management?

A COBIT

B ISO 27001

C NIST Cybersecurity Framework

D GDPR

The NIST Cybersecurity Framework is widely adopted in the US for managing cybersecurity risks.

What does achieving ISO 27001 certification demonstrate?

A Compliance with US federal laws

B Completion of cybersecurity training

C Use of specific cybersecurity software

D Implementation of a formal information security management system

ISO 27001 certification shows an organization has a formal system to manage information security risks.

Which NIST function involves detecting cybersecurity events quickly?

A Protect

B Detect

C Respond

D Recover

The 'Detect' function focuses on identifying cybersecurity incidents as soon as possible.

Explain the main goals and structure of the NIST Cybersecurity Framework.

Think about how NIST helps organizations handle cybersecurity risks step-by-step.

Describe what ISO 27001 certification means for an organization and why it is important.

Consider how ISO 27001 helps protect information and builds confidence.