Security frameworks provide structured approaches to managing risk and implementing controls. They serve as roadmaps for security programs.
NIST Cybersecurity Framework (CSF)
Five core functions: Identify, Protect, Detect, Respond, Recover. Widely adopted in US government and critical infrastructure.
OWASP Top 10
The most critical web application security risks, updated regularly. Includes Broken Access Control, Cryptographic Failures, Injection, and more.
MITRE ATT&CK
Comprehensive knowledge base of adversary tactics, techniques, and procedures. Essential for threat modeling and red team planning.
ISO/IEC 27001
International standard for Information Security Management Systems (ISMS). Provides risk-based approach to managing information security.
CIS Controls
18 prioritized security practices designed to block the most common attack vectors.