Skip to content
Global sound
Framework: The NIST Cybersecurity Framework (CSF)

Framework: The NIST Cybersecurity Framework (CSF)

by Jason Edwards

Latest episode
Welcome to Framework: The NIST CSF

About this podcast

**Framework** is your go-to podcast for mastering the **NIST Cybersecurity Framework (CSF)**—the foundational model for building and improving organizational security programs. This series breaks down every function, category, and subcategory within the CSF, helping professionals, educators, and leaders understand how to apply the framework in real-world environments. Each episode delivers clear, practical explanations that connect framework concepts to daily security operations, governance, and risk management practices. Whether you’re new to cybersecurity or refining an established program, Framework gives you the tools and understanding to align your organization with one of the most trusted security models in the world.

Listeners will gain insight into how the CSF’s five core functions—Identify, Protect, Detect, Respond, and Recover—work together to strengthen resilience and reduce cyber risk. The series also explores how organizations can tailor the CSF to their size, sector, and maturity level, integrate it with other standards, and measure progress through profiles and implementation tiers. With practical examples and step-by-step explanations, Framework helps you turn the structure of the CSF into a living, operational roadmap for security success.

Developed by **BareMetalCyber.com**, Framework is designed to make cybersecurity standards understandable, actionable, and relevant. Tune in on your favorite platform and build the clarity, confidence, and competence to apply the NIST Cybersecurity Framework in your organization.

Episodes

The newest 20 of 114 episodes

  • Welcome to Framework: The NIST CSF · 2 minDive into a fast, no-fluff overview of what this podcast delivers, who it’s for, and how each episode helps you level up with practical, real-world takeaways. In this trailer…
  • RC.CO-04 - Sharing Public Recovery Updates · 19 min · Episode 113RC.CO-04 involves sharing public updates on incident recovery using approved channels and messaging, such as breach notifications or preventative steps, to inform affected…
  • RC.CO-03 - Communicating Recovery Progress · 19 min · Episode 112RC.CO-03 ensures recovery activities and progress are shared with designated stakeholders—like leadership and suppliers—consistent with response plans and agreements. This…
  • RC.RP-06 - Declaring Recovery Completion · 19 min · Episode 111RC.RP-06 declares the end of recovery once predefined criteria are met, finalizing the process with a comprehensive after-action report detailing the incident, actions, and…
  • RC.RP-05 - Confirming System Restoration · 19 min · Episode 110RC.RP-05 verifies the integrity of restored assets—checking for lingering threats or root causes—before returning systems to production, confirming normal operations. This…
  • RC.RP-04 - Restoring Critical Functions Post-Incident · 19 min · Episode 109RC.RP-04 considers critical mission functions and cybersecurity risks to define post-incident operational norms, using impact records to prioritize restoration order. This…
  • RC.RP-03 - Verifying Backup Integrity · 18 min · Episode 108RC.RP-03 ensures backups and restoration assets are checked for integrity—free of compromise or corruption—before use in recovery efforts. This verification prevents…
  • RC.RP-02 - Prioritizing Recovery Actions · 19 min · Episode 107RC.RP-02 involves selecting, scoping, and prioritizing recovery actions based on incident response plan criteria and available resources, adapting as needs shift. This ensures…
  • RC.RP-01 - Launching Incident Recovery Efforts · 18 min · Episode 106RC.RP-01 initiates the recovery phase of the incident response plan once triggered, ensuring all responsible parties are aware of their roles and required authorizations. This…
  • RS.MI-02 - Eradicating Incident Threats · 19 min · Episode 105RS.MI-02 ensures incidents are fully eradicated, removing threats like malware or unauthorized access through automated system features or manual responder actions. This can…
  • RS.MI-01 - Containing Cybersecurity Incidents · 18 min · Episode 104RS.MI-01 focuses on containing incidents to prevent their expansion, using automated tools like antivirus or manual actions by responders to isolate threats. This can involve…
  • RS.CO-03 - Sharing Information with Stakeholders · 20 min · Episode 103RS.CO-03 involves sharing incident information with designated stakeholders—both internal, like leadership, and external, like ISACs—consistent with response plans and…
  • RS.CO-02 - Notifying Stakeholders of Incidents · 19 min · Episode 102RS.CO-02 ensures timely notification of internal and external stakeholders—like customers, partners, or regulators—about incidents, following breach procedures or contractual…
  • RS.AN-08 - Assessing Incident Magnitude · 19 min · Episode 101RS.AN-08 estimates and validates an incident’s magnitude by assessing its scope and impact, searching other targets for indicators of compromise or persistence. This involves…
  • RS.AN-07 - Preserving Incident Data Integrity · 19 min · Episode 100RS.AN-07 focuses on collecting and preserving incident data and metadata—such as source and timestamps—using chain-of-custody procedures to ensure integrity. This comprehensive…
  • RS.AN-06 - Recording Investigation Actions · 19 min · Episode 99RS.AN-06 ensures that all investigative actions during an incident—like system checks or containment steps—are meticulously recorded, with integrity and provenance preserved…
  • RS.AN-03 - Investigating Incident Causes · 18 min · Episode 98RS.AN-03 conducts detailed analysis to reconstruct incident events, identify involved assets, and pinpoint root causes, such as exploited vulnerabilities or threat actors. This…
  • RS.MA-05 - Initiating Incident Recovery · 19 min · Episode 97RS.MA-05 applies predefined criteria to determine when to shift from response to recovery, based on incident characteristics and operational considerations. This decision…
  • RS.MA-04 - Escalating Incidents When Needed · 20 min · Episode 96RS.MA-04 ensures incidents are escalated or elevated to higher levels of authority or expertise when their complexity or impact exceeds initial handling capabilities. This…
  • RS.MA-03 - Categorizing and Prioritizing Incidents · 20 min · Episode 95RS.MA-03 categorizes incidents—such as ransomware or data breaches—and prioritizes them based on scope, impact, and urgency, balancing rapid recovery with investigation needs…

Live, last hour: 2,190 songs on 7,706 stations in 142 countries

Discover the world through radio

More ways to discover (9)

Heard something good? Save it, or open it straight away in Spotify.

Radio 538 luisteren - Live!Popular right now