NIST CSF Mapping Made Easy

How to organize your security stack with the Cyber Defense Matrix

NIST CSF standardizes a comprehensive set of controls to address the security risks into five core functional areas: Identify, Protect, Detect, Respond and Recover.

What it doesn’t do, however, is provide answers to some basic questions: Identify what? Protect what?

The Cyber Defense Matrix, created by Sounil Yu, provides clear organizational principles that help leaders visualize their security programs and ensure their approach is aligned with NIST CSF. Once the Cyber Defense Matrix is filled out, it’s easy to identify gaps, as well as any overlaps, in your cybersecurity technology stack.

Use the Cyber Defense Matrix to:

• Align your security strategy with NIST CSF
• Find & fix holes in your security program
• Identify gaps and overlaps in your security stack