Framework
NIST Cybersecurity Framework 2.0
The executive structure for governance, cybersecurity outcomes and investment priorities.
Study guide →Cyber Policy Review
Standards & Guidance
A CISO reading library: understand what each publication is for, how to apply it and what evidence to ask for.
Process guidance
NIST SP 800-37 Rev. 2
A lifecycle process that connects control evidence with explicit risk authorisation.
Study guide →Control catalogue
NIST SP 800-53 Rev. 5
A security and privacy control catalogue for turning risk decisions into testable safeguards.
Study guide →Process guidance
NIST SP 800-61 Rev. 3
Incident response integrated with governance, preparation, detection and recovery.
Study guide →Historical guidance
CISA AA20-352A
How to turn campaign intelligence into exposure assessment and an investigation plan.
Study guide →Historical guidance
CISA Eviction Guidance · AR21-134A
Coordinated removal of an intruder across on-premises systems, identity and cloud trust.
Study guide →Original study commentary, not a reproduction of the full publication. Read the linked source for every individual requirement, control enhancement, condition and exception. Applicability depends on the organisation and its governing obligations.