Apply · Mappings
NIST Cybersecurity Framework 2.0
From principle to practice. From practice to recognised controls.
Every virtue against NIST Cybersecurity Framework 2.0. Control identifiers link to the NIST reference; strengths are stated as words.
- 01Virtue
- 02Behaviour
- 03Practice
- 04Control
- 05Evidence
- 06Assessment
| Virtue | Control | Control title | Strength | Why it maps |
|---|---|---|---|---|
| 勇02 / 08Yū | DE.CM-01 | Networks and network services monitored | direct | Continuous monitoring is the platform courage builds on, though the framework stops short of mandating the hunt. |
| DE.AE-02 | Potentially adverse events analysed | direct | Analysing adverse events is the disciplined core of threat hunting that both frameworks do require. | |
| RS.MA-01 | Incident response plan executed | direct | Executing the response plan is acting decisively on what the hunt turns up. |