Sign in Subscribe

Brian Weidner

Brian Weidner

NIST CSF 2.0 Detect – Continuous Monitoring (DE.CM) Explained

NIST CSF 2.0 Detect – Continuous Monitoring (DE.CM) Explained

If I had to identify one capability that separates mature security programs from reactive ones, it would be continuous monitoring. Firewalls, endpoint tools, and cloud controls don’t protect an organization on their own. What protects the organization is the ongoing ability to detect abnormal behavior quickly, consistently, and at

NIST CSF 2.0 – Protect Function Deep Dive: Technology Infrastructure Resilience (PR.IR)

NIST CSF 2.0 – Protect Function Deep Dive: Technology Infrastructure Resilience (PR.IR)

Modern enterprises depend on technology everywhere. From cloud workloads to on-prem servers, from network devices to IoT sensors, businesses operate on the assumption that infrastructure “just works.” But what happens when it doesn’t? * Critical applications go offline * Customers can’t access services * Production lines grind to a halt

NIST CSF 2.0 – Protect Function Deep Dive: Platform Security (PR.PS)

NIST CSF 2.0 – Protect Function Deep Dive: Platform Security (PR.PS)

Most organizations don’t get breached because they chose the wrong cloud provider, operating system, or endpoint platform. They get breached because those platforms were not securely configured, maintained, or governed over time. Platform Security (PR.PS) exists because attackers don’t usually defeat technology—they exploit neglect: * Unpatched systems

NIST CSF 2.0 – Protect Function Deep Dive: Data Security (PR.DS)

NIST CSF 2.0 – Protect Function Deep Dive: Data Security (PR.DS)

When executives ask, “What are we actually protecting?” The honest answer is simple: Data. Not servers. Not applications. Not networks. Those matter—but only because data lives on them. PR.DS exists because cybersecurity failures become business crises only when data is exposed, altered, lost, or misused. Everything else is

NIST CSF 2.0 – Protect Function Deep Dive: Awareness and Training (PR.AT)

NIST CSF 2.0 – Protect Function Deep Dive: Awareness and Training (PR.AT)

Most organizations don’t fail at cybersecurity because they lack tools. They fail because people do the reasonable thing in an unreasonable situation: * Clicking a convincing link * Reusing a password to get work done * Sharing files the fastest way, not the safest * Bypassing controls that slow them down PR.AT

NIST CSF 2.0 – Protect Function Deep Dive: Identity, Authentication, and Access Control (PR.AA)

NIST CSF 2.0 – Protect Function Deep Dive: Identity, Authentication, and Access Control (PR.AA)

If you strip most cyber incidents down to their root cause, you will usually find the same failure: Someone—or something—had access they should not have had. It might be: * A compromised employee account * An administrator with too much privilege * A service account that was never rotated * A vendor

NIST CSF 2.0 – Identify Function Deep Dive: Improvement (ID.IM)

NIST CSF 2.0 – Identify Function Deep Dive: Improvement (ID.IM)

Most cybersecurity programs don’t fail because they lack controls. They fail because they fail to learn. Incidents happen. Audits surface gaps. Assessments reveal weaknesses. Yet many organizations treat these moments as interruptions instead of inputs. That is exactly why Improvement (ID.IM) exists in the NIST Cybersecurity Framework (CSF)