CyphrQGovernance & Risk Frameworks
Official risk and control frameworks: what to check at the organisation level.
Checklists and frameworks
| Name | What it is |
|---|---|
| NIST Cybersecurity Framework 2.0 | Six functions (Govern, Identify, Protect, Detect, Respond, Recover) for organising a security programme. |
| NIST Risk Management Framework, SP 800-37 | The step-by-step process for authorising and monitoring systems. |
| NIST SP 800-53 security and privacy controls | The detailed control catalogue behind many audits and frameworks. |
| NIST AI Risk Management Framework | NIST's voluntary framework for managing AI risks. |
| CIS Critical Security Controls | A prioritised set of safeguards, grouped into implementation groups by organisation size. |
| ENISA publications | The EU cybersecurity agency's guidelines, threat landscapes and good-practice reports. |
| NCSC Cyber Essentials | The UK scheme covering five basic technical controls, with certification. |