Deloitte’s NIST capabilities

The bottom line…

Various standards have been developed based on the NIST frameworks, and there are clear commonalities—instances where control and security requirements overlap from standard to standard.

Our skilled professionals can help your organization navigate these complex frameworks by providing the following:

• Consultation on which standards are applicable to your organization
• Gap analyses to identify enhancement areas within your information security architecture, as well as your operational environment
• Readiness and assessment services for the different standards (Deloitte is an authorized FedRAMP Third-Party Assessment Organization)
• Compliance roadmaps for the standard(s) applicable to your organization
  

Back to top

Endnotes

¹ National Institute of Standards and Technology (NIST), "Cybersecurity Framework," https://www.nist.gov/cyberframework.

² NIST Computer Security Resource Center, Security and Privacy Controls for Federal Information Systems and Organizations, April 2013, https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final.

³ US Department of Defense, Office of the Under Secretary of Defense for Acquisition & Sustainment, "Cybersecurity Maturity Model Certification," https://www.acq.osd.mil/cmmc.

⁴ Federal Risk and Authorization Management Program, "Documents," https://www.fedramp.gov/documents.

⁵ NIST Computer Security Resource Center, "FISMA Background," November 30, 2016, https://csrc.nist.gov/projects/risk-management/detailed-overview.

Let's talk