Chapter 3.2 · Frameworks: NIST CSF and CyFun¶
Two Lessons. The first treats NIST CSF as the organising backbone for any programme: a common language of functions rather than a control catalogue. The second goes deep on CyFun, Scaldimet's chosen baseline, including how its assurance levels map to NIS2 and how it pulls operational-technology controls from IEC 62443.
Objectives¶
- Use the NIST CSF functions to organise and communicate a security programme.
- Explain CyFun's structure, its assurance levels and their link to NIS2, and how it maps to IEC 62443 for OT.
Lessons¶
| Lesson | Title | Time |
|---|---|---|
| 3.2.A | NIST CSF: the functional backbone | ~45 min |
| 3.2.B | CyFun in depth (CCB, NIS2 levels, IEC 62443 / OT) | ~50 min |
The Chapter quiz is at the end of Lesson 3.2.B.