While the cybersecurity community is still waiting for the delayed Executive Order on Cybersecurity, it seems highly likely that Federal Agencies will be required to use the NIST Cybersecurity Framework (CSF) to help manage Risk. If it bears out, this would be a very positive step toward improving the cybersecurity posture of the Federal Government. The CSF will enhance FISMA and assist agencies to identify gaps in in cyber readiness that are not easily identified by the current process. By focusing on the five core functions of Identify, Protect, Detect, Respond and Recover federal agencies will gain a clearer view into their strengths and weaknesses.
Symantec has been a strong supporter of the CSF since it was a draft document, and was intimately involved in the effort to develop the Executive Order that spurred its creation. We participated in all of the Industry Workshops – presenting at one – and submitted formal and informal comments throughout the development process. Since it was released, we have been regular speakers on the CSF at conferences and panel discussions, interviewed for articles, published white papers and hosted numerous webinars to educate people on the CSF. The combination of our CSF expertise and our world-class Cybersecurity Solutions make Symantec uniquely qualified to help our Federal clients transition to the CSF.
So how can we help?
We KNOW the CSF and can help educate our clients. We speak the language of both FISMA and CSF – and can translate from one to the other. And most importantly we have mapped our solutions to the 98 Subcategories of the CSF. So if you already use Symantec Solutions we can help you understand where they fit in the CSF. If you need to fill gaps in the CSF we can recommend a solution to meet your needs.
Remember, as the anticipation and speculation continue Symantec is there to be your Trusted Advisor as you start your transition to incorporate the CSF.