According to Gartner, 73% of IT organizations are already implementing or planning to implement NIST CSF in the next 18 months, to measure the security posture of their business infrastructure.<\/p>\n
![\"Aligning](\"https:\/\/live-infoblox-blog.pantheonsite.io\/wp-content\/uploads\/image001.png\")
<\/h2>\nWhy NIST Cyber Security Framework?<\/strong><\/span><\/h2>\nThe increasing adoption rate of NIST CSF by most IT organizations can be attributed to the following.<\/p>\n
\n- NIST applies to both public and private sectors with an appeal beyond the US<\/li>\n
- It can co-exist, take advantage of existing frameworks such as ISO, COBIT, FFIEC, as well as form the basis for compliance programs such as FedRAMP<\/li>\n
- It depicts an information security lifecycle that is typically followed and understood by IT organizations<\/li>\n
- It provides a common taxonomy that can be applied across a wide variety of IT infrastructure components (network, endpoints, applications, and data)<\/li>\n<\/ul>\n
What are the Key Elements of NIST CSF?<\/strong><\/span><\/h2>\nThe NIST CSF is broken down into 3 components \u2013 the core, implementation tiers, and profiles.<\/p>\n
\n- Core<\/strong>: Consists of the following 5 high-level functions, further divided into 23 categories.<\/li>\n
- Identify:<\/strong>\u00a0take inventory of assets on your network and identify risks<\/li>\n
- Protect:<\/strong>\u00a0implement protective technologies to prevent cyber threats from succeeding<\/li>\n
- Detect:<\/strong>\u00a0security events that escape the protective controls including 24\/7 monitoring<\/li>\n
- Respond:<\/strong>\u00a0to security incidents to rapidly contain and mitigate cyber attacks<\/li>\n
- Recover:<\/strong>\u00a0restore any services or capabilities that were impaired due to a cyber security event\/incident<\/li>\n<\/ul>\n
![\"What](\"https:\/\/live-infoblox-blog.pantheonsite.io\/wp-content\/uploads\/NIST-blog.png\")
<\/p>\n
\n- Implementation Tiers:\u00a0<\/strong>help organizations characterize their practices in each of the Core functions and Categories, and prioritize the findings into these 4 tiers \u2013 Partial (1), Risk Informed (2), Repeatable (3), and Adaptive (4), based on the current maturity level of the security practices followed by the IT organization.<\/li>\n
- Profiles:\u00a0<\/strong>define the outcomes based on business needs and prioritize opportunities for improving an organization\u2019s cyber security posture by comparing its \u201ccurrent\u201d state with a desired \u201ctarget\u201d state.<\/li>\n<\/ul>\n
The NIST CSF allows you to establish your unique current and target profile, identify the gaps between in the security controls deployed including the foundational network infrastructure services, and prioritize improvement actions, based on your resources and budget.<\/p>\n
How Does Foundational Network Infrastructure Services Help Satisfy NIST CSF?<\/strong><\/span><\/h2>\nOrganizations can leverage the foundational network infrastructure services to not only provide basic network connectivity but also gain precise visibility and security context for your SecOps team.<\/p>\n
\n- Domain Name Service (DNS):<\/strong>\u00a0provides critical audit trail of any domain\/hostname lookups. This audit trail can be leveraged to quickly map out command-and-control (C&C) servers that have been accessed by compromised devices<\/li>\n
- Domain Host Configuration Protocol (DHCP):<\/strong>\u00a0can be used to dynamically assign reusable IP addresses to devices on the network, every time when a device (e.g. laptop) joins a network. DHCP data also helps correlate disparate security events related to the same device under investigation.<\/li>\n
- IP Address Management (IPAM)<\/strong>: begins with IP address discovery, tracking, and allocation of data pertaining to all devices on the network. It maintains a centralized repository of data associated with devices, networks, and services<\/li>\n<\/ul>\n
At a high-level foundational network infrastructure services can satisfy the following NIST CSF requirements and reduce their overall business risks.<\/p>\n
\n- Identify<\/em>\u00a0what is on your network in real-time by using the IPAM service that provides a single source of truth of your asset inventory.<\/span><\/li>\n
- Protect<\/em>\u00a0your network by rapidly isolating endpoints (using integrations with NAC solutions) compromised by malware that bypasses your perimeter defenses.<\/span><\/li>\n
- Detect<\/em>\u00a0cyber threats that use DNS tunneling to exfiltrate sensitive data and preventing backhaul traffic to malicious C&C servers.<\/span><\/li>\n
- Respond<\/em>\u00a0to and mitigate cyber-attacks by providing API-level integrations with NAC, endpoint detection and response providers.<\/span><\/li>\n<\/ul>\n
Infoblox is leading the way to next-level DDI with its\u00a0Secure Cloud-Managed Network Services<\/a>\u00a0<\/u>. Infoblox brings next-level security, reliability and automation to on-premises, cloud and hybrid networks, setting customers on a path to a single pane of glass for network management.<\/p>\n
The increasing adoption rate of NIST CSF by most IT organizations can be attributed to the following.<\/p>\n
- \n
- NIST applies to both public and private sectors with an appeal beyond the US<\/li>\n
- It can co-exist, take advantage of existing frameworks such as ISO, COBIT, FFIEC, as well as form the basis for compliance programs such as FedRAMP<\/li>\n
- It depicts an information security lifecycle that is typically followed and understood by IT organizations<\/li>\n
- It provides a common taxonomy that can be applied across a wide variety of IT infrastructure components (network, endpoints, applications, and data)<\/li>\n<\/ul>\n
What are the Key Elements of NIST CSF?<\/strong><\/span><\/h2>\n
The NIST CSF is broken down into 3 components \u2013 the core, implementation tiers, and profiles.<\/p>\n
- \n
- Core<\/strong>: Consists of the following 5 high-level functions, further divided into 23 categories.<\/li>\n
- Identify:<\/strong>\u00a0take inventory of assets on your network and identify risks<\/li>\n
- Protect:<\/strong>\u00a0implement protective technologies to prevent cyber threats from succeeding<\/li>\n
- Detect:<\/strong>\u00a0security events that escape the protective controls including 24\/7 monitoring<\/li>\n
- Respond:<\/strong>\u00a0to security incidents to rapidly contain and mitigate cyber attacks<\/li>\n
- Recover:<\/strong>\u00a0restore any services or capabilities that were impaired due to a cyber security event\/incident<\/li>\n<\/ul>\n
<\/p>\n- \n
- Implementation Tiers:\u00a0<\/strong>help organizations characterize their practices in each of the Core functions and Categories, and prioritize the findings into these 4 tiers \u2013 Partial (1), Risk Informed (2), Repeatable (3), and Adaptive (4), based on the current maturity level of the security practices followed by the IT organization.<\/li>\n
- Profiles:\u00a0<\/strong>define the outcomes based on business needs and prioritize opportunities for improving an organization\u2019s cyber security posture by comparing its \u201ccurrent\u201d state with a desired \u201ctarget\u201d state.<\/li>\n<\/ul>\n
The NIST CSF allows you to establish your unique current and target profile, identify the gaps between in the security controls deployed including the foundational network infrastructure services, and prioritize improvement actions, based on your resources and budget.<\/p>\n
How Does Foundational Network Infrastructure Services Help Satisfy NIST CSF?<\/strong><\/span><\/h2>\n
Organizations can leverage the foundational network infrastructure services to not only provide basic network connectivity but also gain precise visibility and security context for your SecOps team.<\/p>\n
- \n
- Domain Name Service (DNS):<\/strong>\u00a0provides critical audit trail of any domain\/hostname lookups. This audit trail can be leveraged to quickly map out command-and-control (C&C) servers that have been accessed by compromised devices<\/li>\n
- Domain Host Configuration Protocol (DHCP):<\/strong>\u00a0can be used to dynamically assign reusable IP addresses to devices on the network, every time when a device (e.g. laptop) joins a network. DHCP data also helps correlate disparate security events related to the same device under investigation.<\/li>\n
- IP Address Management (IPAM)<\/strong>: begins with IP address discovery, tracking, and allocation of data pertaining to all devices on the network. It maintains a centralized repository of data associated with devices, networks, and services<\/li>\n<\/ul>\n
At a high-level foundational network infrastructure services can satisfy the following NIST CSF requirements and reduce their overall business risks.<\/p>\n
- \n
- Identify<\/em>\u00a0what is on your network in real-time by using the IPAM service that provides a single source of truth of your asset inventory.<\/span><\/li>\n
- Protect<\/em>\u00a0your network by rapidly isolating endpoints (using integrations with NAC solutions) compromised by malware that bypasses your perimeter defenses.<\/span><\/li>\n
- Detect<\/em>\u00a0cyber threats that use DNS tunneling to exfiltrate sensitive data and preventing backhaul traffic to malicious C&C servers.<\/span><\/li>\n
- Respond<\/em>\u00a0to and mitigate cyber-attacks by providing API-level integrations with NAC, endpoint detection and response providers.<\/span><\/li>\n<\/ul>\n
Infoblox is leading the way to next-level DDI with its\u00a0Secure Cloud-Managed Network Services<\/a>\u00a0<\/u>. Infoblox brings next-level security, reliability and automation to on-premises, cloud and hybrid networks, setting customers on a path to a single pane of glass for network management.<\/p>\n
- Protect<\/em>\u00a0your network by rapidly isolating endpoints (using integrations with NAC solutions) compromised by malware that bypasses your perimeter defenses.<\/span><\/li>\n
- Domain Host Configuration Protocol (DHCP):<\/strong>\u00a0can be used to dynamically assign reusable IP addresses to devices on the network, every time when a device (e.g. laptop) joins a network. DHCP data also helps correlate disparate security events related to the same device under investigation.<\/li>\n
- Profiles:\u00a0<\/strong>define the outcomes based on business needs and prioritize opportunities for improving an organization\u2019s cyber security posture by comparing its \u201ccurrent\u201d state with a desired \u201ctarget\u201d state.<\/li>\n<\/ul>\n
- Identify:<\/strong>\u00a0take inventory of assets on your network and identify risks<\/li>\n
- Core<\/strong>: Consists of the following 5 high-level functions, further divided into 23 categories.<\/li>\n