Implementing the NIST : cybersecurity Framework

Executive Summary
Chapter 1. Introduction
	Background
	Governance and Management of Enterprise Information Technology
	Introduction to the Framework for Improving Critical Infrastructure Cybersecurity
	Introduction to COBIT 5
		COBIT 5 Governance and Management
		COBIT 5 Goals Cascade
		COBIT 5 Enablers
		COBIT 5 Process Reference Model
		COBIT 5 Implementation Guidance
	Scope and Approach
Chapter 2. Introduction to NIST Cybersecurity Framework 1.0
	Framework Background
	Coordination of Framework Implementation
	Framework Core
	Framework Implementation Tiers
	Framework Profiles
	Risk Considerations From COBIT and the CSF
	The Risk Function Perspective
	The Risk Management Perspective
Chapter 3. Framework Implementation
	Relationship of the COBIT 5 Goals Cascade to the CSF
	CSF Step 1:  Prioritize and Scope.
	CSF Step 2:  Orient, and Step 3:  Create a Current Profile
	CSF Step 4:  Conduct a Risk Assessment, and Step 5:  Create a Target Profile
	CSF Step 6:  Determine, Analyze, and Prioritize Gaps.
	CSF Step 7:  Implement Action Plan
	CSF Action Plan Review
	CSF Life Cycle Management
Chapter 4. Communicating Cybersecurity Requirements With Stakeholders
Appendix A:  Framework Core
Appendix B:  Detailed Profile Template
Appendix C:  Framework Cover Letter
Appendix D:  Action Planning
Appendix E:  Considerations for Critical Infrastructure Sectors