07 - References & Further Reading

references-&-further-reading', 'appsec', 'security', 'compliance']

NIST Cybersecurity Framework 2.0 Official Publication: The primary source and foundational text for the framework.
NIST CSF 2.0 Reference Tool: An interactive tool for exploring the Core, Profiles, and Tiers.
NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations. The CSF directly crosswalks to these detailed controls.

CISA Cyber Essentials: A guide for leaders of small businesses as well as leaders of small and local government agencies to develop an actionable understanding of where to start implementing organizational cybersecurity practices.
Open Policy Agent (OPA): The open-source, general-purpose policy engine used for compliance automation.
AWS Security Hub - NIST CSF Standard: AWS documentation on automated NIST CSF mapping.
Microsoft Defender for Cloud - Regulatory Compliance: Azure's approach to mapping infrastructure to the NIST CSF.