TIM-6745

National Institute of Standards and Technology. (2018, April 16). Framework for improving critical infrastructure cybersecurity, version 1.1.
This resource presents a voluntary risk management framework ("The Framework") that consists of standards, guidelines, and best practices to manage cybersecurity-related risk to promote protection and resilience of critical infrastructure and other sectors important to the economy and national security. Focus reading on the Executive Summary.

Department of Defense Office of Prepublication and Security Review. (2019, October 15). Defense Industrial Base – Guide to implementing the cybersecurity framework.
This resource highlights a guide to implementing a cybersecurity framework for defense industrial base organizations. Focus reading on pages 1 – 15.

Clark, D. D. (2019, September 19). A framework to understand cybersecurity. National Academy of Engineering.
This resource breaks the challenge of improved cybersecurity into potentially actionable parts, provides a roadmap to better security, and illustrates why the challenge of better security is so vexing.

Marinos, N. (2018). Critical infrastructure protection: Additional actions are essential for assessing cybersecurity framework adoption. GAO Reports, i-46.
This resource reports the U.S.'s critical infrastructure, including the public and private systems and assets that are vital to national security economic stability.

White, S. K. (2019, January 15). What is COBIT? A framework for alignment and governance. CIO.
This resource highlights Control Objectives for Information and Related Technologies (COBIT) as a framework for alignment and governance.

Homeland Security. (2016, October). Critical infrastructure threat information sharing framework – A reference guide for the critical infrastructure community.
This resource highlights resource to help critical infrastructure owners and operators, as well as other private sectors, federal, and state, local, tribal, and territorial (SLTT) government partners that share threat information, learn where they can turn, and in what circumstances, to both receive and report threat information. Focus reading on pages 1 – 11.

Davis, J. (2018, December 26). NIST risk management framework update addresses privacy, security. Health IT Security.
This resource highlights the NIST risk management framework update as it to privacy, security.

Cybersecurity & Infrastructure Security Agency. (n.d.). Cybersecurity Framework.
This resource lists framework function areas and guidance that organizations can use for cyber resilience.