Cybersecurity Frameworks, Architectures & Roadmaps - Revision history

BPeat at 20:34, 28 April 2024

2024-04-28T20:34:11Z

BPeat at 01:42, 27 April 2024

2024-04-27T01:42:15Z

BPeat at 01:01, 20 March 2024

2024-03-20T01:01:25Z

BPeat at 23:59, 8 September 2023

2023-09-08T23:59:25Z

BPeat at 19:25, 22 August 2023

2023-08-22T19:25:05Z

BPeat: /* Important Tools */

2023-08-15T22:42:36Z

‎Important Tools

BPeat: /* Zero Trust */

2023-07-14T15:51:07Z

‎Zero Trust

BPeat: /* Zero Trust */

2023-07-14T15:33:23Z

‎Zero Trust

BPeat: /* Zero Trust */

2023-07-14T15:32:30Z

‎Zero Trust

BPeat: /* Zero Trust */

2023-07-14T15:12:07Z

‎Zero Trust

@@ Line 181: / Line 181: @@
 [https://www.bing.com/news/search?q=ai+zero+trust+zta+cybersecurity&qft=interval%3d%228%22 ...Bing News]
-* [[In-Context Learning (ICL)]] ... [[Context]] ... [[Causation vs. Correlation]] ... [[Autocorrelation]] ... [[Out-of-Distribution (OOD) Generalization]] ... [[Transfer Learning]]
+* [[Perspective]] ... [[Context]] ... [[In-Context Learning (ICL)]] ... [[Transfer Learning]] ... [[Out-of-Distribution (OOD) Generalization]]
 * [[Policy]] ... [[Policy vs Plan]] ... [[Constitutional AI]] ... [[Trust Region Policy Optimization (TRPO)]] ... [[Policy Gradient (PG)]] ... [[Proximal Policy Optimization (PPO)]]
 * [[Architectures]] for AI ... [[Enterprise Architecture (EA)]] ... [[Enterprise Portfolio Management (EPM)]] ... [[Architecture and Interior Design]]

@@ Line 21: / Line 21: @@
 * [[Artificial General Intelligence (AGI) to Singularity]] ... [[Inside Out - Curious Optimistic Reasoning| Curious Reasoning]] ... [[Emergence]] ... [[Moonshots]] ... [[Explainable / Interpretable AI|Explainable AI]] ...  [[Algorithm Administration#Automated Learning|Automated Learning]]
 * [[Libraries & Frameworks Overview]] ... [[Libraries & Frameworks]] ... [[Git - GitHub and GitLab]] ... [[Other Coding options]]
-* [[Development]] ... [[Notebooks]] ... [[Development#AI Pair Programming Tools|AI Pair Programming]] ... [[Codeless Options, Code Generators, Drag n' Drop|Codeless, Generators, Drag n' Drop]] ... [[Algorithm Administration#AIOps/MLOps|AIOps/MLOps]] ... [[Platforms: AI/Machine Learning as a Service (AIaaS/MLaaS)|AIaaS/MLaaS]]
+* [[Development]] ... [[Notebooks]] ... [[Development#AI Pair Programming Tools|AI Pair Programming]] ... [[Codeless Options, Code Generators, Drag n' Drop|Codeless]] ... [[Hugging Face]] ... [[Algorithm Administration#AIOps/MLOps|AIOps/MLOps]] ... [[Platforms: AI/Machine Learning as a Service (AIaaS/MLaaS)|AIaaS/MLaaS]]
 * [[Cybersecurity#MITRE ATT&CK™|MITRE ATT&CK™]]
 * [https://cyberexperts.com/cybersecurity-frameworks 23 Top Cybersecurity Frameworks | CyberExperts.com]

@@ Line 184: / Line 184: @@
 * [[Policy]] ... [[Policy vs Plan]] ... [[Constitutional AI]] ... [[Trust Region Policy Optimization (TRPO)]] ... [[Policy Gradient (PG)]] ... [[Proximal Policy Optimization (PPO)]]
 * [[Architectures]] for AI ... [[Enterprise Architecture (EA)]] ... [[Enterprise Portfolio Management (EPM)]] ... [[Architecture and Interior Design]]
-* [[Immersive Reality]] ... [[Metaverse]] ... [[Digital Twin]] ... [[Internet of Things (IoT)]] ... [[Transhumanism]]
+* [[Immersive Reality]] ... [[Metaverse]] ... [[Omniverse]] ... [[Transhumanism]] ... [[Religion]]
 * [[Risk, Compliance and Regulation]] ... [[Ethics]] ... [[Privacy]] ... [[Law]] ... [[AI Governance]] ... [[AI Verification and Validation]]
 * [[Cybersecurity]] ... [[Open-Source Intelligence - OSINT |OSINT]] ... [[Cybersecurity Frameworks, Architectures & Roadmaps | Frameworks]] ... [[Cybersecurity References|References]] ... [[Offense - Adversarial Threats/Attacks| Offense]] ... [[National Institute of Standards and Technology (NIST)|NIST]] ... [[U.S. Department of Homeland Security (DHS)| DHS]] ... [[Screening; Passenger, Luggage, & Cargo|Screening]] ... [[Law Enforcement]] ... [[Government Services|Government]] ... [[Defense]] ... [[Joint Capabilities Integration and Development System (JCIDS)#Cybersecurity & Acquisition Lifecycle Integration| Lifecycle Integration]] ... [[Cybersecurity Companies/Products|Products]] ... [[Cybersecurity: Evaluating & Selling|Evaluating]]

@@ Line 19: / Line 19: @@
 * [[Risk, Compliance and Regulation]]  ... [[Ethics]]  ... [[Privacy]]  ... [[Law]]  ... [[AI Governance]]  ... [[AI Verification and Validation]]
 * [[Telecommunications]] ... [[Computer Networks]] ... [[Telecommunications#5G|5G]] ... [[Satellite#Satellite Communications|Satellite Communications]] ... [[Quantum Communications]] ... [[Agents#Communication | Agents]] ... [[AI Generated Broadcast Content|AI Broadcast; Radio, Stream, TV]]
-* [[Singularity]] ... [[Artificial Consciousness / Sentience|Sentience]] ... [[Artificial General Intelligence (AGI)| AGI]] ... [[Inside Out - Curious Optimistic Reasoning| Curious Reasoning]] ... [[Emergence]] ... [[Moonshots]] ... [[Explainable / Interpretable AI|Explainable AI]] ...  [[Algorithm Administration#Automated Learning|Automated Learning]]
+* [[Artificial General Intelligence (AGI) to Singularity]] ... [[Inside Out - Curious Optimistic Reasoning| Curious Reasoning]] ... [[Emergence]] ... [[Moonshots]] ... [[Explainable / Interpretable AI|Explainable AI]] ...  [[Algorithm Administration#Automated Learning|Automated Learning]]
 * [[Libraries & Frameworks Overview]] ... [[Libraries & Frameworks]] ... [[Git - GitHub and GitLab]] ... [[Other Coding options]]
 * [[Development]] ... [[Notebooks]] ... [[Development#AI Pair Programming Tools|AI Pair Programming]] ... [[Codeless Options, Code Generators, Drag n' Drop|Codeless, Generators, Drag n' Drop]] ... [[Algorithm Administration#AIOps/MLOps|AIOps/MLOps]] ... [[Platforms: AI/Machine Learning as a Service (AIaaS/MLaaS)|AIaaS/MLaaS]]

@@ Line 18: / Line 18: @@
 * [[Cybersecurity]] ... [[Open-Source Intelligence - OSINT |OSINT]] ... [[Cybersecurity Frameworks, Architectures & Roadmaps | Frameworks]] ... [[Cybersecurity References|References]] ... [[Offense - Adversarial Threats/Attacks| Offense]] ... [[National Institute of Standards and Technology (NIST)|NIST]] ... [[U.S. Department of Homeland Security (DHS)| DHS]] ... [[Screening; Passenger, Luggage, & Cargo|Screening]] ... [[Law Enforcement]] ... [[Government Services|Government]] ... [[Defense]] ... [[Joint Capabilities Integration and Development System (JCIDS)#Cybersecurity & Acquisition Lifecycle Integration| Lifecycle Integration]] ... [[Cybersecurity Companies/Products|Products]] ... [[Cybersecurity: Evaluating & Selling|Evaluating]]
 * [[Risk, Compliance and Regulation]]  ... [[Ethics]]  ... [[Privacy]]  ... [[Law]]  ... [[AI Governance]]  ... [[AI Verification and Validation]]
-* [[Telecommunications]] ... [[Computer Networks]] ... [[Telecommunications#5G|5G]] ... [[Satellite#Satellite Communications|Satellite Communications]] ... [[Quantum#Quantum Internet / Communications|Quantum Internet]] ... [[Agents#Communication | Agents]] ... [[AI Generated Broadcast Content|AI Broadcast; Radio, Stream, TV]]
+* [[Telecommunications]] ... [[Computer Networks]] ... [[Telecommunications#5G|5G]] ... [[Satellite#Satellite Communications|Satellite Communications]] ... [[Quantum Communications]] ... [[Agents#Communication | Agents]] ... [[AI Generated Broadcast Content|AI Broadcast; Radio, Stream, TV]]
 * [[Singularity]] ... [[Artificial Consciousness / Sentience|Sentience]] ... [[Artificial General Intelligence (AGI)| AGI]] ... [[Inside Out - Curious Optimistic Reasoning| Curious Reasoning]] ... [[Emergence]] ... [[Moonshots]] ... [[Explainable / Interpretable AI|Explainable AI]] ...  [[Algorithm Administration#Automated Learning|Automated Learning]]
 * [[Libraries & Frameworks Overview]] ... [[Libraries & Frameworks]] ... [[Git - GitHub and GitLab]] ... [[Other Coding options]]

@@ Line 48: / Line 48: @@
 = Important Tools =
 Cybersecurity frameworks, architectures and roadmaps are important tools for organizations to improve their security posture and manage cyber risks. Here is some information about them from various sources:
@@ Line 63: / Line 64: @@
 * <b>NIST Cybersecurity Framework (CSF)</b>: A voluntary framework developed by the National Institute of Standards and Technology (NIST) for critical infrastructure sectors in the US, but widely adopted by other sectors and countries as well. The CSF consists of five core functions: Identify, Protect, Detect, Respond and Recover. Each function has a set of categories, subcategories and informative references that provide guidance on specific security outcomes.
 * <b>ISO/IEC 27001</b>: An international standard for information security management systems (ISMS) that specifies the requirements for establishing, implementing, maintaining and improving an ISMS. The standard covers all aspects of information security, including risk assessment, policies, procedures, controls, monitoring, auditing and improvement. The standard also provides a certification scheme for organizations that want to demonstrate their compliance.
 * <b>CIS Controls</b>: A set of 20 prioritized and actionable security controls developed by the Center for Internet Security (CIS) based on the most common and effective practices observed in real-world incidents. The CIS Controls cover both technical and organizational aspects of security, such as inventory, configuration, vulnerability management, access control, incident response and awareness training. The CIS Controls also provide implementation guidance for different types of organizations, such as small businesses, enterprises and cloud environments.

@@ Line 204: / Line 204: @@
 * [https://www.cisco.com/c/en/us/products/security/what-is-sase-secure-access-service-edge.html What Is Secure Access Service Edge (SASE)? | CISCO] ... a network architecture that combines VPN and SD-WAN capabilities with cloud-native security functions such as secure web gateways, cloud access security brokers, firewalls, and zero-trust network access. These functions are delivered from the cloud and provided as a service by the SASE vendor.
 * [https://www.cisa.gov/identity-credential-and-access-management-icam Identity credentialing and access management (ICAM)] ... ensure that the right person with the right privileges can access the right information at the right time
-* [https://breakingdefense.com/2023/03/disa-completes-thunderdome-prototype-a-step-closer-to-achieving-dods-zero-trust-vision/ network architecture program; laying a zero-trust technology foundation]
+* [https://breakingdefense.com/2023/03/disa-completes-thunderdome-prototype-a-step-closer-to-achieving-dods-zero-trust-vision/ Thunderdome is a network architecture program; laying a zero-trust technology foundation]
 * [[Defense#US Defense Information Systems Agency (DISA)|US Defense Information Systems Agency (DISA)]]

@@ Line 201: / Line 201: @@
 Part of... [[Telecommunications#Software-Defined Networking (SDN)|software-defined networking (SD-WAN)]] and Secure Access Service Edge (SASE). SASE delivers wide-area networking with [[cybersecurity]] both on-site and in the cloud as DoD expands its reliance on cloud data storage. One of the key tenants of zero trust involves identity. Thunderdome will use identity verification, including public key infrastructure (PKI), which uses a certificate to validate data being sent from one point to another, and identity credentialing and access management (ICAM). ICAM verifies a person’s identity and links them to their allowed access privileges.  - [https://federalnewsnetwork.com/defense-news/2023/02/thunderdome-hits-its-targets-disa-moves-to-next-phase-of-zero-trust/  Thunderdome hits its targets, DISA moves to next phase of zero trust | Alexandra Lohr - Federal New Network]
-* [[Telecommunications#Software-Defined Networking (SDN)|software-defined networking (SD-WAN)]]
+* [[Telecommunications#Software-Defined Networking (SDN)|Software-defined networking (SD-WAN)]]
 * [https://www.cisco.com/c/en/us/products/security/what-is-sase-secure-access-service-edge.html What Is Secure Access Service Edge (SASE)? | CISCO] ... a network architecture that combines VPN and SD-WAN capabilities with cloud-native security functions such as secure web gateways, cloud access security brokers, firewalls, and zero-trust network access. These functions are delivered from the cloud and provided as a service by the SASE vendor.
 * [https://www.cisa.gov/identity-credential-and-access-management-icam Identity credentialing and access management (ICAM)] ... ensure that the right person with the right privileges can access the right information at the right time
 * [https://breakingdefense.com/2023/03/disa-completes-thunderdome-prototype-a-step-closer-to-achieving-dods-zero-trust-vision/ network architecture program; laying a zero-trust technology foundation]
-* [Defense#US Defense Information Systems Agency (DISA)|US Defense Information Systems Agency (DISA)]
+* [[Defense#US Defense Information Systems Agency (DISA)|US Defense Information Systems Agency (DISA)]]

← Older revision		Revision as of 15:32, 14 July 2023
Line 200:		Line 200:

	Part of... [[Telecommunications#Software-Defined Networking (SDN)\|software-defined networking (SD-WAN)]] and Secure Access Service Edge (SASE). SASE delivers wide-area networking with [[cybersecurity]] both on-site and in the cloud as DoD expands its reliance on cloud data storage. One of the key tenants of zero trust involves identity. Thunderdome will use identity verification, including public key infrastructure (PKI), which uses a certificate to validate data being sent from one point to another, and identity credentialing and access management (ICAM). ICAM verifies a person’s identity and links them to their allowed access privileges. - [https://federalnewsnetwork.com/defense-news/2023/02/thunderdome-hits-its-targets-disa-moves-to-next-phase-of-zero-trust/ Thunderdome hits its targets, DISA moves to next phase of zero trust \| Alexandra Lohr - Federal New Network]		Part of... [[Telecommunications#Software-Defined Networking (SDN)\|software-defined networking (SD-WAN)]] and Secure Access Service Edge (SASE). SASE delivers wide-area networking with [[cybersecurity]] both on-site and in the cloud as DoD expands its reliance on cloud data storage. One of the key tenants of zero trust involves identity. Thunderdome will use identity verification, including public key infrastructure (PKI), which uses a certificate to validate data being sent from one point to another, and identity credentialing and access management (ICAM). ICAM verifies a person’s identity and links them to their allowed access privileges. - [https://federalnewsnetwork.com/defense-news/2023/02/thunderdome-hits-its-targets-disa-moves-to-next-phase-of-zero-trust/ Thunderdome hits its targets, DISA moves to next phase of zero trust \| Alexandra Lohr - Federal New Network]
		+
		+	* [[Telecommunications#Software-Defined Networking (SDN)\|software-defined networking (SD-WAN)]]
		+	* [https://www.cisco.com/c/en/us/products/security/what-is-sase-secure-access-service-edge.html What Is Secure Access Service Edge (SASE)? \| CISCO] ... a network architecture that combines VPN and SD-WAN capabilities with cloud-native security functions such as secure web gateways, cloud access security brokers, firewalls, and zero-trust network access. These functions are delivered from the cloud and provided as a service by the SASE vendor.
		+	* [https://www.cisa.gov/identity-credential-and-access-management-icam Identity credentialing and access management (ICAM)] ... ensure that the right person with the right privileges can access the right information at the right time
		+	* [https://breakingdefense.com/2023/03/disa-completes-thunderdome-prototype-a-step-closer-to-achieving-dods-zero-trust-vision/ network architecture program; laying a zero-trust technology foundation]
		+	* [Defense#US Defense Information Systems Agency (DISA)\|US Defense Information Systems Agency (DISA)]

← Older revision		Revision as of 15:12, 14 July 2023
Line 199:		Line 199:


−	Part of... software-defined networking (SD-WAN) and Secure Access Service Edge (SASE). SASE delivers wide-area networking with cybersecurity both on-site and in the cloud as DoD expands its reliance on cloud data storage. One of the key tenants of zero trust involves identity. Thunderdome will use identity verification, including public key infrastructure (PKI), which uses a certificate to validate data being sent from one point to another, and identity credentialing and access management (ICAM). ICAM verifies a person’s identity and links them to their allowed access privileges. - [https://federalnewsnetwork.com/defense-news/2023/02/thunderdome-hits-its-targets-disa-moves-to-next-phase-of-zero-trust/ Thunderdome hits its targets, DISA moves to next phase of zero trust \| Alexandra Lohr - Federal New Network]	+	Part of... [[Telecommunications#Software-Defined Networking (SDN)\|software-defined networking (SD-WAN)]] and Secure Access Service Edge (SASE). SASE delivers wide-area networking with [[cybersecurity]] both on-site and in the cloud as DoD expands its reliance on cloud data storage. One of the key tenants of zero trust involves identity. Thunderdome will use identity verification, including public key infrastructure (PKI), which uses a certificate to validate data being sent from one point to another, and identity credentialing and access management (ICAM). ICAM verifies a person’s identity and links them to their allowed access privileges. - [https://federalnewsnetwork.com/defense-news/2023/02/thunderdome-hits-its-targets-disa-moves-to-next-phase-of-zero-trust/ Thunderdome hits its targets, DISA moves to next phase of zero trust \| Alexandra Lohr - Federal New Network]