Specific sections of standards, guidelines, and practices common among critical infrastructure sectors that illustrate a method to achieve the outcomes associated with each Subcategory in the Cybersecurity Framework.
Source(s):
NISTIR 8183
NISTIR 8183A Vol. 1
NISTIR 8183 Rev. 1
A relationship between a Reference Document and the NIST Cybersecurity Framework, using the OLIR Template.
Source(s):
NISTIR 8204
under Informative Reference (Reference)
A specific section of standards, guidelines, and practices common among critical infrastructure sectors that illustrates a method to achieve the outcomes associated with each Subcategory. An example of an Informative Reference is ISO/IEC 27001 Control A.10.8.3, which supports the “Data-in-transit is protected” Subcategory of the “Data Security” Category in the “Protect” function.
Source(s):
NIST Cybersecurity Framework Version 1.1
under Informative Reference
A relationship between a Focal Document Element and a Reference Document Element.
Source(s):
NISTIR 8278
under Informative Reference
NISTIR 8278A
under Informative Reference