NIST CSF functions, NIST 800-53, ISO 27001, SOC 2, PCI DSS, HIPAA security rule, GDPR and risk assessment steps.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What are the five core functions of the NIST Cybersecurity Framework?
Show answer
Identify, Protect, Detect, Respond, and Recover- What does the Identify function in NIST CSF focus on?
Show answer
Understanding your assets, risks, and business context to establish a baseline for security- What does the Protect function in NIST CSF focus on?
Show answer
Implementing safeguards to limit the impact of potential threats and vulnerabilities- What does the Detect function in NIST CSF focus on?
Show answer
Identifying and monitoring activities to discover cybersecurity events in progress- What does the Respond function in NIST CSF focus on?
Show answer
Taking action to contain and remediate detected security incidents- What does the Recover function in NIST CSF focus on?
Show answer
Restoring systems and assets to normal operations after an incident- How many Categories exist within the NIST CSF core functions?
Show answer
22 Categories that provide specific objectives and outcomes for each function- What is NIST Special Publication 800-53?
Show answer
A catalog of security and privacy controls for federal information systems and organizations- What are the three main control types in NIST 800-53?
Show answer
Technical controls, operational controls, and management controls- What does NIST 800-53 control AU (Audit and Accountability) address?
Show answer
System event logging, user activity monitoring, and audit log protection- What does NIST 800-53 control IA (Identification and Authentication) address?
Show answer
User authentication methods, access control, and authorization mechanisms- How many control impact levels does NIST 800-53 define?
Show answer
Three levels: Low, Moderate, and High, based on system categorization- What is ISO/IEC 27001?
Show answer
An international standard for information security management systems (ISMS)- How many control objectives are defined in ISO 27001 Annex A?
Show answer
14 control categories covering information security across the organization- What are the 14 control categories in ISO 27001?
Show answer
A1-A5 (governance, asset management, personnel), A6-A8 (access control), A9-A10 (cryptography), A11-A12 (operational security), A13-A14 (communications and incident management)
FlashKeepers