The NIST Cyber Security Framework (https://www.nist.gov/cyberframework) has become an established standard for cyber security management. With version 2.0 of this framework introducing a GOVERN function (NIST CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0, February 26, 2024, p. 3), the importance of communication between the functions has increased significantly, as GOVERN addresses an understanding of organizational context; the establishment of cybersecurity strategy and cybersecurity supply chain risk management; roles, responsibilities, and authorities; policy; and the oversight of cybersecurity strategy.
The goal of this project is to develop a communications model with the GOVERN function as a central command and control hub. This model should then be followed by a prototype based on container technology. The focus of the model and protype is the communication between the GOVERN function and the other functions (see figure).
NIST CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0, February 26, 2024, p. 5
The following sources can serve as starting point for this project:
NIST CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0, February 26, 2024, https://www.nist.gov/cyberframework
Use containers to Build, Share and Run your applications: https://www.docker.com/resources/what-container/
The suggested structure for the paper accompanying the project is:
- Introduction/Topic description/Motivation
- State of the art in literature and practice
- Modelling method and approach used
- Development of the model
- Prototype (documentation, source code, etc.)
- Test
- Discussion of the results
- Outlook and conclusion
Tags: Quirchmayr;