nist-csf-mapping

NIST Cybersecurity Framework Mapping Skill

Purpose

Map security implementations to NIST CSF 2.0 framework functions and categories, ensuring comprehensive cybersecurity coverage.

When to Use

• ✅ Security architecture reviews
• ✅ Compliance assessments
• ✅ Risk management activities
• ✅ Security control implementation

NIST CSF Core Functions

IDENTIFY (ID)

ID.AM - Asset Management

# Document all assets
assets:
  - Application: CIA Web Platform
    Classification: Critical
    Owner: Development Team
    Data: Political intelligence, user data

ID.RA - Risk Assessment

• Conduct threat modeling (STRIDE)
• Annual risk assessments
• Vulnerability scanning

PROTECT (PR)

PR.AC - Identity Management and Access Control

@Configuration
@EnableWebSecurity
public class AccessControlConfig {
    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) {
        http.authorizeHttpRequests(auth -> auth
            .requestMatchers("/admin/**").hasRole("ADMIN")
            .requestMatchers("/api/**").authenticated()
            .anyRequest().permitAll()
        );
        return http.build();
    }
}

PR.DS - Data Security

• Encryption at rest (AES-256)
• Encryption in transit (TLS 1.3)
• Data classification enforcement

DETECT (DE)

DE.CM - Security Continuous Monitoring

@Service
public class SecurityMonitoringService {
    @Scheduled(fixedRate = 60000) // Every minute
    public void monitorSecurityEvents() {
        List<SecurityEvent> events = securityEventRepository.findRecent();
        for (SecurityEvent event : events) {
            if (event.isSuspicious()) {
                alertService.raiseAlert(event);
            }
        }
    }
}

RESPOND (RS)

RS.AN - Analysis

• Incident classification
• Root cause analysis
• Impact assessment

RS.MI - Mitigation

• Incident containment
• System isolation
• Evidence preservation

RECOVER (RC)

RC.RP - Recovery Planning

• Backup and restore procedures
• Disaster recovery plan
• Business continuity plan

Implementation Checklist

• ✅ Identify all assets
• ✅ Implement access controls
• ✅ Enable logging and monitoring
• ✅ Define incident response procedures
• ✅ Test recovery procedures

Hack23 ISMS Policy References

NIST CSF Framework Implementation:

• Information Security Strategy - Strategic CSF alignment
• Information Security Policy - Governance framework (GV)
• Risk Assessment Methodology - Identify function (ID)
• Access Control Policy - Protect function (PR.AC)
• Cryptography Policy - Data security (PR.DS)
• Secure Development Policy - Platform security (PR.IP)
• Vulnerability Management - Detect function (DE.CM)
• Incident Response Plan - Respond function (RS)
• Business Continuity Plan - Recover function (RC)
• Backup Recovery Policy - Recovery planning (RC.RP)
• Change Management - Configuration management (PR.IP)

All Hack23 ISMS Policies: https://github.com/Hack23/ISMS-PUBLIC

CIA Platform Architecture References

• Security Architecture: CIA SECURITY_ARCHITECTURE.md - CSF control implementation
• Threat Model: CIA THREAT_MODEL.md - Risk identification (ID.RA)

References

• NIST CSF 2.0: https://www.nist.gov/cyberframework
• NIST CSF Implementation Guide: https://doi.org/10.6028/NIST.CSWP.29
• ISO 27001:2022: https://www.iso.org/standard/27001
• CIS Controls v8.1: https://www.cisecurity.org/controls