When the FFIEC held its webinar to announce the sunsetting of the CAT, they were adamant about the NIST-CSF being the "Rosetta Stone" for all the other frameworks. We've heard examiners list it as one of the top 3 options time and time again. That said, we know the NIST-CSF is not going away. It provides an excellent foundation for us to customize for the community banking industry. And it gives us the flexibility to make updates as we see changes in the regulatory and threat landscape. After a lot of time and research, we didn't feel confident in that for some of the other frameworks. The NIST-CSF, in our opinion, is the best option for us to deliver excellent service to our customers.
With all that in mind, we have created our own solution, CySPOT® CSF+, built on NIST Cybersecurity Framework 2.0. When you contract with us, we will work with you to complete the assessment, provide identified goals for program maturity, and a management report that summarizes details of the review, identified goals, and methodology.
If your bank or credit union is struggling to find and perform an adequate CAT replacement, we'd love to talk with you about how our CySPOT® CSF+ might be the solution you're looking for.
Visit our CySPOT® CSF+ page to get all the details on deliverables and pricing, and fill out the form to start the conversation!