Final answer:
The NIST Cybersecurity Framework defines five core security functions: identify, protect, detect, respond, and recover.
Step-by-step explanation:
The five core security functions, as defined by the NIST Cybersecurity Framework, are:
Identify: This involves developing an understanding of the assets, systems, and data that need to be protected. It includes conducting risk assessments and inventorying critical infrastructure.
Protect: This function focuses on implementing safeguards to ensure the security of systems and data. Examples include encryption, access controls, and firewalls.
Detect: This function involves continuous monitoring and analysis to identify potential security incidents and breaches. Intrusion detection systems, log analysis, and security incident event management tools are used.
Respond: When a security incident occurs, this function involves taking immediate action to contain and mitigate the impact. This may include incident response plans, communication protocols, and forensic investigations.
Recover: This function focuses on restoring normal operations after a security incident. It includes backup and recovery strategies, as well as post-incident analysis and updates to security practices.