I apply NIST guidance to structure security operations by mapping monitoring, detection, and response activities to the NIST Cybersecurity Framework. NIST SP 800-53 controls inform system hardening and access control decisions, SP 800-61 guides incident detection and response workflows, and SP 800-30 supports risk-based prioritization of vulnerabilities and threats.
NIST CSF Application:
• Detect — SIEM monitoring and alert analysis
• Respond — Incident handling and escalation workflows
• Protect — Access control, system hardening, and data security