The Nist 2.0 Cybersecurity Framework: Practical Risk Management Using Real-World Incidents
暫譯: NIST 2.0 網路安全框架：利用實際事件進行實用風險管理

Learn to identify, protect, defend, and recover from cyber incidents

Cybersecurity Risk Management Using the NIST 2.0 Framework delivers clear guidance on applying the gold standard NIST framework in complex, real-world situations. Drawing on her extensive cybersecurity research and reporting, author Cynthia Brumfield explains how to identify risks, defend against threats, and recover from incidents using compelling case studies.

The book examines high-profile incidents, including Microsoft's Midnight Blizzard attack, the Ticketmaster data breach, and the Columbus ransomware incident, to illustrate NIST functions, and inform readers on how to create asset inventories, implement protective measures, detect suspicious activity, respond to incidents, and establish governance policies. Each chapter provides implementation examples, references, and demystification of NIST framework controls for securing assets and managing risks.

The book includes:

• Real-world case studies from Microsoft, Ticketmaster, MGM Resorts and Caeser's Entertainment, and other organizations that illustrate practical applications of the NIST framework
• Implementation guidance covering all six NIST functions: Identify, Protect, Detect, Respond, Recover, and Govern
• Chapter summaries and quizzes that reinforce learning objectives and help readers assess their understanding
• Clear and concise explanations of how to achieve the outcomes articulated across the NIST categories and subcategories.

Whether you're a student, organizational decision-maker, IT professional, public or private cybersecurity worker, or government contractor, this book provides the practical knowledge needed to implement the NIST 2.0 Framework effectively. You'll learn from real-world failures and successes to build a robust cybersecurity program.