Is your Cybersecurity protection matching best practice?<\/strong><\/h3>\nClearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.<\/strong>\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients.<\/p>\nThe best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity Framework.\u00a0 This is also reflected in NZ in the government\u2019s CERTNZ programme.<\/p>\n
So what is NIST, and how does Kinetics help you match the standard?<\/strong><\/h2>\nThe great news is that we\u2019ve built our KARE for Security service following this guidance.<\/p>\n
So, what do you need to do to match \u201creasonable\u2019? Is KARE for Security enough?<\/p>\n
<\/p>\n
In 2018 the US Department of Commerce, National Institute of Standards and Technology (NIST) released version 1.1 of its Cybersecurity Framework.\u00a0 The Framework was mandated by the US government to improve cybersecurity risk management in critical infrastructure.\u00a0 Because it references globally recognized standards for cyber![\"\"](\"http:\/\/kinetics.co.nz\/wp-content\/uploads\/2020\/01\/NIST1.jpg\")
<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.<\/p>\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.<\/p>\n
Kinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.<\/p>\n
Identify<\/h3>\n
<\/p>\n
NIST Description Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.<\/p>\n
The activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.<\/p>\n
Understanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.<\/p>\n
Examples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy”]<\/p>\n
KARE for Security A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.<\/p>\n
\n- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n
- Managed IT assets reporting<\/li>\n
- Recommendation reporting; tracking and planning<\/li>\n
- Darkweb identity breach reporting<\/li>\n<\/ul>\n
<\/p>\n
Protect<\/h3>\n
<\/p>\n
“NIST Description Develop and implement appropriate safeguards to ensure delivery of critical services.<\/p>\n
The \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.<\/p>\n
Examples of outcome categories within this function include:<\/p>\n
\n- Identity Management and Access Control;<\/li>\n
- Awareness and Training; Data Security;<\/li>\n
- Information Protection Processes and Procedures;<\/li>\n
- Maintenance;<\/li>\n
- and Protective Technology.<\/li>\n<\/ul>\n
<\/p>\n
KARE for Security Multifactor Authentication for identity management and access control.<\/p>\n
\n- Conditional Access.<\/li>\n
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n
- Microsoft and third party patching.<\/li>\n
- Email record identity management.<\/li>\n
- Office 365 ATP management.<\/li>\n
- DNS Scrubbing.<\/li>\n
- Endpoint Advanced Anti-Virus protection.<\/li>\n
- Backup monitoring\/management.<\/li>\n
- Office 365 Backup<\/li>\n
- KARE DR Backup<\/li>\n
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n
- Mail Scrubbing.<\/li>\n
- Mobile Device Management.<\/li>\n
- Kinetics Password monitoring and reporting.<\/li>\n
- KARE Password Vault”]<\/li>\n<\/ul>\n
Detect<\/h3>\n
NIST Description Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.<\/p>\n
The \u2018Detect\u2019 function enables timely discovery of cybersecurity events.<\/p>\n
Examples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.<\/p>\n
KARE for Security<\/p>\n
\n- Office 365 Forwarding alerts.<\/li>\n
- Office 365 Activity (download and deletion) alerts.<\/li>\n
- Elevated rights alerts.<\/li>\n
- Unusual Location alerts.<\/li>\n
- Virus activity alerts.<\/li>\n
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n
- Darkweb identity breach alerting.<\/li>\n
- Backup encryption alerts.”]<\/li>\n<\/ul>\n
<\/p>\n
Respond<\/h3>\n
NIST Description Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.<\/p>\n
The \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.<\/p>\n
Examples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.<\/p>\n
KARE for Security<\/p>\n
\n- Kinetics Security Response Team and process.<\/li>\n
- Yearly FlightPlan review.<\/li>\n
- Quarterly review.<\/li>\n
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n
Recovery<\/h3>\n
NIST Description Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.<\/p>\n
The \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.<\/p>\n
Examples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.<\/p>\n
KARE for Security<\/p>\n
\n- Office 365 Backup.<\/li>\n
- Backup monitoring and management.<\/li>\n
- KARE DR Offsite Recovery.<\/li>\n
- KARE DR regular image boot test.<\/li>\n
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Aligning with NIST…..? Is your Cybersecurity protection matching best practice? Clearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients. The best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity […]<\/p>\n","protected":false},"author":5,"featured_media":4093,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"
[header2 text=\"<\/b>Aligning with NIST.....?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\nIs your Cybersecurity protection matching best practice?<\/strong><\/h3>\nClearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.<\/strong>\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients.\n\nThe best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity Framework.\u00a0 This is also reflected in NZ in the government\u2019s CERTNZ programme.\n[header2 text=\"<\/b>So what is NIST, and how does Kinetics help you match the standard?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\nThe great news is that we\u2019ve built our KARE for Security service following this guidance.\n\nSo, what do you need to do to match \u201creasonable\u2019? Is KARE for Security enough?\n\n \n\nIn 2018 the US Department of Commerce, National Institute of Standards and Technology (NIST) released version 1.1 of its Cybersecurity Framework.\u00a0 The Framework was mandated by the US government to improve cybersecurity risk management in critical infrastructure.\u00a0 Because it references globally recognized standards for cyber<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.\n\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.\n\nKinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.\nIdentify<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.\n\nThe activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.\n\nUnderstanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.\n\nExamples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.\n\n \t- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n \t
- Managed IT assets reporting<\/li>\n \t
- Recommendation reporting; tracking and planning<\/li>\n \t
- Darkweb identity breach reporting<\/li>\n<\/ul>\n \n
<\/h3>\n<\/h2>\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\nProtect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate safeguards to ensure delivery of critical services.\n\nThe \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.\n\nExamples of outcome categories within this function include:\n\n \t- Identity Management and Access Control;<\/li>\n \t
- Awareness and Training; Data Security;<\/li>\n \t
- Information Protection Processes and Procedures;<\/li>\n \t
- Maintenance;<\/li>\n \t
- and Protective Technology.<\/li>\n<\/ul>\n \n\n \n\n \n\n \n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"Multifactor Authentication for identity management and access control.\n
\n \t- Conditional Access.<\/li>\n \t
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n \t
- Microsoft and third party patching.<\/li>\n \t
- Email record identity management.<\/li>\n \t
- Office 365 ATP management.<\/li>\n \t
- DNS Scrubbing.<\/li>\n \t
- Endpoint Advanced Anti-Virus protection.<\/li>\n \t
- Backup monitoring\/management.<\/li>\n \t
- Office 365 Backup<\/li>\n \t
- KARE DR Backup<\/li>\n \t
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n \t
- Mail Scrubbing.<\/li>\n \t
- Mobile Device Management.<\/li>\n \t
- Kinetics Password monitoring and reporting.<\/li>\n \t
- KARE Password Vault\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n
Detect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.\n\nThe \u2018Detect\u2019 function enables timely discovery of cybersecurity events.\n\nExamples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.\n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Office 365 Forwarding alerts.<\/li>\n \t
- Office 365 Activity (download and deletion) alerts.<\/li>\n \t
- Elevated rights alerts.<\/li>\n \t
- Unusual Location alerts.<\/li>\n \t
- Virus activity alerts.<\/li>\n \t
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n \t
- Darkweb identity breach alerting.<\/li>\n \t
- Backup encryption alerts.\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n\n \n
Respond<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.\n\nThe \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.\n\nExamples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Kinetics Security Response Team and process.<\/li>\n \t
- Yearly FlightPlan review.<\/li>\n \t
- Quarterly review.<\/li>\n \t
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n \n\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\n\n \n
Recovery<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.\n\nThe \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.\n\nExamples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Office 365 Backup.<\/li>\n \t
- Backup monitoring and management.<\/li>\n \t
- KARE DR Offsite Recovery.<\/li>\n \t
- KARE DR regular image boot test.<\/li>\n \t
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/h3>\n\"]\n\n[\/col]\n\n[wow_clear]\n\n ","_et_gb_content_width":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-4091","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4091"}],"version-history":[{"count":0,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
The best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity Framework.\u00a0 This is also reflected in NZ in the government\u2019s CERTNZ programme.<\/p>\n
So what is NIST, and how does Kinetics help you match the standard?<\/strong><\/h2>\nThe great news is that we\u2019ve built our KARE for Security service following this guidance.<\/p>\n
So, what do you need to do to match \u201creasonable\u2019? Is KARE for Security enough?<\/p>\n
<\/p>\n
In 2018 the US Department of Commerce, National Institute of Standards and Technology (NIST) released version 1.1 of its Cybersecurity Framework.\u00a0 The Framework was mandated by the US government to improve cybersecurity risk management in critical infrastructure.\u00a0 Because it references globally recognized standards for cyber<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.<\/p>\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.<\/p>\n
Kinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.<\/p>\n
Identify<\/h3>\n
<\/p>\n
NIST Description Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.<\/p>\n
The activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.<\/p>\n
Understanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.<\/p>\n
Examples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy”]<\/p>\n
KARE for Security A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.<\/p>\n
\n- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n
- Managed IT assets reporting<\/li>\n
- Recommendation reporting; tracking and planning<\/li>\n
- Darkweb identity breach reporting<\/li>\n<\/ul>\n
<\/p>\n
Protect<\/h3>\n
<\/p>\n
“NIST Description Develop and implement appropriate safeguards to ensure delivery of critical services.<\/p>\n
The \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.<\/p>\n
Examples of outcome categories within this function include:<\/p>\n
\n- Identity Management and Access Control;<\/li>\n
- Awareness and Training; Data Security;<\/li>\n
- Information Protection Processes and Procedures;<\/li>\n
- Maintenance;<\/li>\n
- and Protective Technology.<\/li>\n<\/ul>\n
<\/p>\n
KARE for Security Multifactor Authentication for identity management and access control.<\/p>\n
\n- Conditional Access.<\/li>\n
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n
- Microsoft and third party patching.<\/li>\n
- Email record identity management.<\/li>\n
- Office 365 ATP management.<\/li>\n
- DNS Scrubbing.<\/li>\n
- Endpoint Advanced Anti-Virus protection.<\/li>\n
- Backup monitoring\/management.<\/li>\n
- Office 365 Backup<\/li>\n
- KARE DR Backup<\/li>\n
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n
- Mail Scrubbing.<\/li>\n
- Mobile Device Management.<\/li>\n
- Kinetics Password monitoring and reporting.<\/li>\n
- KARE Password Vault”]<\/li>\n<\/ul>\n
Detect<\/h3>\n
NIST Description Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.<\/p>\n
The \u2018Detect\u2019 function enables timely discovery of cybersecurity events.<\/p>\n
Examples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.<\/p>\n
KARE for Security<\/p>\n
\n- Office 365 Forwarding alerts.<\/li>\n
- Office 365 Activity (download and deletion) alerts.<\/li>\n
- Elevated rights alerts.<\/li>\n
- Unusual Location alerts.<\/li>\n
- Virus activity alerts.<\/li>\n
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n
- Darkweb identity breach alerting.<\/li>\n
- Backup encryption alerts.”]<\/li>\n<\/ul>\n
<\/p>\n
Respond<\/h3>\n
NIST Description Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.<\/p>\n
The \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.<\/p>\n
Examples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.<\/p>\n
KARE for Security<\/p>\n
\n- Kinetics Security Response Team and process.<\/li>\n
- Yearly FlightPlan review.<\/li>\n
- Quarterly review.<\/li>\n
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n
Recovery<\/h3>\n
NIST Description Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.<\/p>\n
The \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.<\/p>\n
Examples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.<\/p>\n
KARE for Security<\/p>\n
\n- Office 365 Backup.<\/li>\n
- Backup monitoring and management.<\/li>\n
- KARE DR Offsite Recovery.<\/li>\n
- KARE DR regular image boot test.<\/li>\n
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Aligning with NIST…..? Is your Cybersecurity protection matching best practice? Clearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients. The best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity […]<\/p>\n","protected":false},"author":5,"featured_media":4093,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"
[header2 text=\"<\/b>Aligning with NIST.....?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\nIs your Cybersecurity protection matching best practice?<\/strong><\/h3>\nClearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.<\/strong>\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients.\n\nThe best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity Framework.\u00a0 This is also reflected in NZ in the government\u2019s CERTNZ programme.\n[header2 text=\"<\/b>So what is NIST, and how does Kinetics help you match the standard?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\nThe great news is that we\u2019ve built our KARE for Security service following this guidance.\n\nSo, what do you need to do to match \u201creasonable\u2019? Is KARE for Security enough?\n\n \n\nIn 2018 the US Department of Commerce, National Institute of Standards and Technology (NIST) released version 1.1 of its Cybersecurity Framework.\u00a0 The Framework was mandated by the US government to improve cybersecurity risk management in critical infrastructure.\u00a0 Because it references globally recognized standards for cyber<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.\n\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.\n\nKinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.\nIdentify<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.\n\nThe activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.\n\nUnderstanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.\n\nExamples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.\n\n \t- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n \t
- Managed IT assets reporting<\/li>\n \t
- Recommendation reporting; tracking and planning<\/li>\n \t
- Darkweb identity breach reporting<\/li>\n<\/ul>\n \n
<\/h3>\n<\/h2>\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\nProtect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate safeguards to ensure delivery of critical services.\n\nThe \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.\n\nExamples of outcome categories within this function include:\n\n \t- Identity Management and Access Control;<\/li>\n \t
- Awareness and Training; Data Security;<\/li>\n \t
- Information Protection Processes and Procedures;<\/li>\n \t
- Maintenance;<\/li>\n \t
- and Protective Technology.<\/li>\n<\/ul>\n \n\n \n\n \n\n \n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"Multifactor Authentication for identity management and access control.\n
\n \t- Conditional Access.<\/li>\n \t
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n \t
- Microsoft and third party patching.<\/li>\n \t
- Email record identity management.<\/li>\n \t
- Office 365 ATP management.<\/li>\n \t
- DNS Scrubbing.<\/li>\n \t
- Endpoint Advanced Anti-Virus protection.<\/li>\n \t
- Backup monitoring\/management.<\/li>\n \t
- Office 365 Backup<\/li>\n \t
- KARE DR Backup<\/li>\n \t
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n \t
- Mail Scrubbing.<\/li>\n \t
- Mobile Device Management.<\/li>\n \t
- Kinetics Password monitoring and reporting.<\/li>\n \t
- KARE Password Vault\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n
Detect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.\n\nThe \u2018Detect\u2019 function enables timely discovery of cybersecurity events.\n\nExamples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.\n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Office 365 Forwarding alerts.<\/li>\n \t
- Office 365 Activity (download and deletion) alerts.<\/li>\n \t
- Elevated rights alerts.<\/li>\n \t
- Unusual Location alerts.<\/li>\n \t
- Virus activity alerts.<\/li>\n \t
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n \t
- Darkweb identity breach alerting.<\/li>\n \t
- Backup encryption alerts.\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n\n \n
Respond<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.\n\nThe \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.\n\nExamples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Kinetics Security Response Team and process.<\/li>\n \t
- Yearly FlightPlan review.<\/li>\n \t
- Quarterly review.<\/li>\n \t
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n \n\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\n\n \n
Recovery<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.\n\nThe \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.\n\nExamples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n\n \t- Office 365 Backup.<\/li>\n \t
- Backup monitoring and management.<\/li>\n \t
- KARE DR Offsite Recovery.<\/li>\n \t
- KARE DR regular image boot test.<\/li>\n \t
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/h3>\n\"]\n\n[\/col]\n\n[wow_clear]\n\n ","_et_gb_content_width":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-4091","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4091"}],"version-history":[{"count":0,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.<\/p>\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.<\/p>\n
Kinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.<\/p>\n
Identify<\/h3>\n
<\/p>\n
NIST Description Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.<\/p>\n
The activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.<\/p>\n
Understanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.<\/p>\n
Examples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy”]<\/p>\n
KARE for Security A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.<\/p>\n
- \n
- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n
- Managed IT assets reporting<\/li>\n
- Recommendation reporting; tracking and planning<\/li>\n
- Darkweb identity breach reporting<\/li>\n<\/ul>\n
<\/p>\n
Protect<\/h3>\n
<\/p>\n
“NIST Description Develop and implement appropriate safeguards to ensure delivery of critical services.<\/p>\n
The \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.<\/p>\n
Examples of outcome categories within this function include:<\/p>\n
- \n
- Identity Management and Access Control;<\/li>\n
- Awareness and Training; Data Security;<\/li>\n
- Information Protection Processes and Procedures;<\/li>\n
- Maintenance;<\/li>\n
- and Protective Technology.<\/li>\n<\/ul>\n
<\/p>\n
KARE for Security Multifactor Authentication for identity management and access control.<\/p>\n
- \n
- Conditional Access.<\/li>\n
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n
- Microsoft and third party patching.<\/li>\n
- Email record identity management.<\/li>\n
- Office 365 ATP management.<\/li>\n
- DNS Scrubbing.<\/li>\n
- Endpoint Advanced Anti-Virus protection.<\/li>\n
- Backup monitoring\/management.<\/li>\n
- Office 365 Backup<\/li>\n
- KARE DR Backup<\/li>\n
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n
- Mail Scrubbing.<\/li>\n
- Mobile Device Management.<\/li>\n
- Kinetics Password monitoring and reporting.<\/li>\n
- KARE Password Vault”]<\/li>\n<\/ul>\n
Detect<\/h3>\n
NIST Description Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.<\/p>\n
The \u2018Detect\u2019 function enables timely discovery of cybersecurity events.<\/p>\n
Examples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.<\/p>\n
KARE for Security<\/p>\n
- \n
- Office 365 Forwarding alerts.<\/li>\n
- Office 365 Activity (download and deletion) alerts.<\/li>\n
- Elevated rights alerts.<\/li>\n
- Unusual Location alerts.<\/li>\n
- Virus activity alerts.<\/li>\n
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n
- Darkweb identity breach alerting.<\/li>\n
- Backup encryption alerts.”]<\/li>\n<\/ul>\n
<\/p>\n
Respond<\/h3>\n
NIST Description Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.<\/p>\n
The \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.<\/p>\n
Examples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.<\/p>\n
KARE for Security<\/p>\n
- \n
- Kinetics Security Response Team and process.<\/li>\n
- Yearly FlightPlan review.<\/li>\n
- Quarterly review.<\/li>\n
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n
Recovery<\/h3>\n
NIST Description Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.<\/p>\n
The \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.<\/p>\n
Examples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.<\/p>\n
KARE for Security<\/p>\n
- \n
- Office 365 Backup.<\/li>\n
- Backup monitoring and management.<\/li>\n
- KARE DR Offsite Recovery.<\/li>\n
- KARE DR regular image boot test.<\/li>\n
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Aligning with NIST…..? Is your Cybersecurity protection matching best practice? Clearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients. The best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity […]<\/p>\n","protected":false},"author":5,"featured_media":4093,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"
[header2 text=\"<\/b>Aligning with NIST.....?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\n
Is your Cybersecurity protection matching best practice?<\/strong><\/h3>\nClearly the cybersecurity stakes are higher.\u00a0 The security precautions that used to be reasonable are no longer enough.<\/strong>\u00a0 Stakeholders expect businesses to do more \u2013 whether it\u2019s your insurer, your bank, your shareholders or your clients.\n\nThe best guidance on \u201creasonable\u201d is the \u201cNIST\u201d Cybersecurity Framework.\u00a0 This is also reflected in NZ in the government\u2019s CERTNZ programme.\n
[header2 text=\"<\/b>So what is NIST, and how does Kinetics help you match the standard?<\/strong><\/b>\" align=\"left\" color=\"#336A40\" margintop=\"\"]<\/b><\/h2>\nThe great news is that we\u2019ve built our KARE for Security service following this guidance.\n\nSo, what do you need to do to match \u201creasonable\u2019? Is KARE for Security enough?\n\n \n\nIn 2018 the US Department of Commerce, National Institute of Standards and Technology (NIST) released version 1.1 of its Cybersecurity Framework.\u00a0 The Framework was mandated by the US government to improve cybersecurity risk management in critical infrastructure.\u00a0 Because it references globally recognized standards for cyber
<\/a>security, the Framework is used internationally as a guide to strengthening cybersecurity in critical infrastructure as well as other sectors and communities.\n\nThe Framework consists of five Core Functions which organise the basic cybersecurity activities at their highest levels.\n\nKinetics KARE For Security practices and features align with the five Core Functions. The list of features implemented, and the degree of their implementation, can vary from client to client depending on the client\u2019s commitment, technology and business needs.\nIdentify<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop an organisational understanding to manage cybersecurity risk to systems; people; assets; data; and capabilities.\n\nThe activities in the \u2018Identify\u2019 function are foundational for effective use of the Framework.\n\nUnderstanding the business context; the resources that support critical functions; and the related cybersecurity risks enables an organisation to focus and prioritise its efforts; consistent with its risk management strategy and business needs.\n\nExamples of outcome categories within this function include: Asset Management; Business Environment; Governance; Risk Assessment; and Risk Management Strategy\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"A FlightPlan review covering your technology; governance, risk identification and options on how to reduce it.\n
- \n \t
- Monthly reporting and quarterly review meeting including elevated rights and user account reporting<\/li>\n \t
- Managed IT assets reporting<\/li>\n \t
- Recommendation reporting; tracking and planning<\/li>\n \t
- Darkweb identity breach reporting<\/li>\n<\/ul>\n \n
<\/h3>\n
<\/h2>\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\n
Protect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate safeguards to ensure delivery of critical services.\n\nThe \u2018Protect\u2019 function supports the ability to limit or contain the impact of a potential cybersecurity event.\n\nExamples of outcome categories within this function include:\n
- \n \t
- Identity Management and Access Control;<\/li>\n \t
- Awareness and Training; Data Security;<\/li>\n \t
- Information Protection Processes and Procedures;<\/li>\n \t
- Maintenance;<\/li>\n \t
- and Protective Technology.<\/li>\n<\/ul>\n \n\n \n\n \n\n \n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"Multifactor Authentication for identity management and access control.\n
- \n \t
- Conditional Access.<\/li>\n \t
- Awareness through reoccurring Phishing Testing; online Security training and Security Presentations.<\/li>\n \t
- Microsoft and third party patching.<\/li>\n \t
- Email record identity management.<\/li>\n \t
- Office 365 ATP management.<\/li>\n \t
- DNS Scrubbing.<\/li>\n \t
- Endpoint Advanced Anti-Virus protection.<\/li>\n \t
- Backup monitoring\/management.<\/li>\n \t
- Office 365 Backup<\/li>\n \t
- KARE DR Backup<\/li>\n \t
- Firewall Packet inspection; Gateway Anti-Virus protection; ATP; Intrusion Prevention Services.<\/li>\n \t
- Mail Scrubbing.<\/li>\n \t
- Mobile Device Management.<\/li>\n \t
- Kinetics Password monitoring and reporting.<\/li>\n \t
- KARE Password Vault\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n
Detect<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to identify the occurrence of a cybersecurity event.\n\nThe \u2018Detect\u2019 function enables timely discovery of cybersecurity events.\n\nExamples of outcome categories within this function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.\n\n \n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n
- \n \t
- Office 365 Forwarding alerts.<\/li>\n \t
- Office 365 Activity (download and deletion) alerts.<\/li>\n \t
- Elevated rights alerts.<\/li>\n \t
- Unusual Location alerts.<\/li>\n \t
- Virus activity alerts.<\/li>\n \t
- Firewall; Bot; port scan; intrusion alerts.<\/li>\n \t
- Darkweb identity breach alerting.<\/li>\n \t
- Backup encryption alerts.\"]<\/li>\n<\/ul>\n[\/col]\n\n[wow_clear]\n\n \n
Respond<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to take action regarding a detected cybersecurity incident.\n\nThe \u2018Respond\u2019 function supports the ability to contain the impact of a potential cybersecurity incident.\n\nExamples of outcome categories within this function include: Response Planning; Communications; Analysis; Mitigation; and Improvements.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n
- \n \t
- Kinetics Security Response Team and process.<\/li>\n \t
- Yearly FlightPlan review.<\/li>\n \t
- Quarterly review.<\/li>\n \t
- Recommendations tracking; reporting and planning.<\/li>\n<\/ul>\n \n\n \n\n\"]\n\n[\/col]\n\n[wow_clear]\n\n \n
Recovery<\/h3>\n[col size=\"7\"]\n\n[table type=\"striped\" cols=\"NIST Description\" data=\"Develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident.\n\nThe \u2018Recover\u2019 function supports timely recovery to normal operations to reduce the impact from a cybersecurity incident.\n\nExamples of outcome categories within this Function include: Recovery Planning; Improvements; and Communications.\n\n\"]\n\n[\/col]\n\n[col size=\"5\"]\n\n[table type=\"striped\" cols=\"KARE for Security\" data=\"\n
- \n \t
- Office 365 Backup.<\/li>\n \t
- Backup monitoring and management.<\/li>\n \t
- KARE DR Offsite Recovery.<\/li>\n \t
- KARE DR regular image boot test.<\/li>\n \t
- KARE DR Recovery test<\/li>\n<\/ul>\n
<\/h3>\n\"]\n\n[\/col]\n\n[wow_clear]\n\n ","_et_gb_content_width":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-4091","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4091"}],"version-history":[{"count":0,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/4091\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}