---
title: Cybersecurity Frameworks
description: Cybersecurity frameworks are structured guidelines used to manage and reduce digital risk. You will understand industry standards like NIST, ISO 27001, and CIS Controls, enabling you to implement, assess, and align security practices with organizational goals.
category: programming-tech
subcategory: cybersecurity
difficulty: beginner, intermediate, advanced
url: /subject/cybersecurity-frameworks
---

# Cybersecurity Frameworks

Cybersecurity frameworks are structured guidelines used to manage and reduce digital risk. You will understand industry standards like NIST, ISO 27001, and CIS Controls, enabling you to implement, assess, and align security practices with organizational goals.

## Available Resources

1 Books • 5 Websites

## Websites

### 1. MITRE ATT&CK

MITRE's public knowledge base of adversary tactics, techniques and procedures drawn from real-world intrusions, organised into enterprise, mobile and ICS matrices with linked threat groups, software, mitigations and detections. Defenders use it to describe attacker behaviour consistently and map detection coverage and gaps.

**Difficulty:** Intermediate | **Price:** Free

**Link:** https://attack.mitre.org/

**Tags:** mitre-attack, threat-intelligence, adversary-tactics, detection-engineering, incident-response

### 2. CIS Critical Security Controls

Center for Internet Security's prioritized set of defensive safeguards, grouped into implementation groups so smaller organizations know which controls to adopt first. Free download, with mappings to NIST CSF, ISO 27001 and other frameworks.

**Difficulty:** Beginner | **Price:** Free

**Link:** https://www.cisecurity.org/controls

**Tags:** cis-controls, cybersecurity, security-frameworks, risk-management, compliance

### 3. nist.gov/cyberframework

Official NIST Cybersecurity Framework hub explaining the CSF and how to use it for risk-based cybersecurity programs. It provides the framework core (Identify, Protect, Detect, Respond, Recover), implementation guidance, profiles, mappings to other standards, and downloadable resources.

**Difficulty:** Intermediate | **Language:** English | **Price:** Free

**Link:** https://nist.gov/cyberframework

**Tags:** websites, technology-computer-science, cybersecurity

### 4. cisecurity.org

CISecurity.org, the Center for Internet Security, provides practical resources for learning and applying cybersecurity best practices. It features the CIS Controls and CIS Benchmarks, plus configuration guidance, assessment tools, and training materials to help organizations strengthen defenses.

**Difficulty:** Intermediate | **Language:** English | **Price:** Free

**Link:** https://cisecurity.org

**Tags:** websites, technology-computer-science, cybersecurity

### 5. sans.org

Sans.org is the official site of the SANS Institute, a leading provider of cybersecurity training and certification. It offers training courses, GIAC certifications, security research, white papers, and various resources for security professionals.

**Difficulty:** Intermediate | **Language:** English | **Price:** Free

**Link:** https://sans.org

**Tags:** websites, technology-computer-science, cybersecurity

## Books

### 1. Implementing the NIST Cybersecurity Framework

**Author:** ISACA

ISACA guide to adopting the NIST Framework for Improving Critical Infrastructure Cybersecurity, mapped to COBIT 5. Walks through the framework core, implementation tiers, profiles and the seven-step process for assessing current state and prioritising remediation. Covers the 2014 CSF 1.0, not 2.0.

**Difficulty:** Intermediate | **Language:** English | **Price:** Paid

**Link:** https://www.amazon.com/dp/1604203579?tag=edmonddante07-20

**Tags:** books, technology-computer-science, cybersecurity

---

*This content is part of Dantes.io - Your Treasure Map to Knowledge*

*Curated by humans at Dantes.io. Personal study use welcome; republishing this curation requires permission (team@dantes.io).*

View this page online: https://dantes.io/subject/cybersecurity-frameworks