White Paper
NIST CSF Implementation Planning Tool
A three-year action plan for enhancing security program maturity and effectiveness
Tenable is sharing this planning tool, developed by Christopher Paidhrin of the City of Portland, OR, to help you effectively implement the NIST Cybersecurity Framework. The tool uses guidelines from the Center for Internet Security Critical Controls for risk prioritization.
It also recognizes that improving security program effectiveness is NOT a one-and-done activity. Instead, the tool incorporates a three-year action plan with quarter-by-quarter tracking of initiatives, project timelines, and measures of success.
What’s covered?
- Risk and remediation prioritization
- Maturity gaps and selective metrics
- Alignment of business risk to CSC
- Budget and resource prioritization
- Security Frameworks
- Tenable Security Center Plus