I am going to use the Cisco SAFE security reference architecture as a complimentary method to NIST CSF to help explain how these methods can be used to support a Smart City Cyber Security Strategy. SAFE is further expanded through its identification of threat types and mapping to MITRE ATT&CK. In particular i will focus … Continue reading Cisco SAFE security reference architecture
Category: NIST Cyber Framework
The second part of the NIST CSF Identify Function is the Business or City Environment in this case. According to the standard, the purpose of this function category is: The organization’s mission, objectives, stakeholders, and activities are understood and prioritized; this information is used to inform cybersecurity roles, responsibilities, and risk management decisions. Cities are … Continue reading Smart City: Identify – City Environment
Design Guide: Smart City Asset Management Design Guide It is not surprising that the first item in NIST CF is Asset Management with the mapping to the informative references being CIS Control 1 Inventory and Control of Hardware Assets and ISO 27K Annex A8 Asset Management. It is a fundamental requirement for cyber security. Over … Continue reading Smart City: Identify – Asset Management
In this second part introduction to the Cyber Security Framework for a Smart City i will cover the scope of the framework using the best practice described by the NIST Cybersecurity Framework and how the components can be used to work together with a Smart City strategy and thus effect a smart city cyber security … Continue reading Cyber Security Framework for Smart Cities – part 2
Introduction to a series of posts and resources i plan to put together to outline the key aspects of a Cyber Security Framework for a Smart City strategy. Having recently acted as an Advisor to a new Innovate UK research project I thought I would use and adapt some of the recommendations, for problems I … Continue reading Cyber Security Framework for Smart Cities – part 1
It is important to select the right cyber security capabilities necessary to fulfil the scope and vision for a Smart City and the individual cyber security requirements. There may be potentially over 100 cyber security capabilities needed to support a large Smart City organisation and services. They could be chosen from a best practice framework … Continue reading Cyber Security Capabilities for a Smart City Cyber Security Strategy
There is a range of cyber security best practice guidelines and standards that with some adjustments are very suitable for the design and development of a cyber security strategy and protective monitoring programme. They can be modified to the IOT and ICT architectures, diverse environments and the different public and private sector parties involved. In … Continue reading Cyber security best practice for Smart Cities