NIST Cyber Security Framework is the new hotness for enterprise cybersec. Pretty good if you ask me. This is a nice summary though, for a personal blog. Props

NIST Cyber Security Framework is the new hotness for enterprise cybersec. Pretty good if you ask me. This is a nice summary though, for a personal blog. Props to the author for taking the time to put their thoughts out there. I would emphasize the "threat model" idea whenever you go down a rabbit hole of security. "What kind of bad actors could try to access my network/data, and how hard do I want to protect against it?" I used to be more paranoid about storing certain data in the cloud. Why would I put my highly encrypted password safe file on my Google Cloud? The NSA could get it! Listen, if you're being targeted by the nation-state, you have 99 problems. So always balance that usability with reasonable security that aligns with your realistic threat model.