Framework: The NIST Cybersecurity Framework (CSF)

Practical guide to building security programs with the NIST Cybersecurity AI summary

Jason Edwards Visit website › Technology · EN · 114 episodes · latest 2025-10-13

Rank 1179
0 upvotes, 0 downvotes
0

What it is about

**Framework** is your go-to podcast for mastering the **NIST Cybersecurity Framework (CSF)**—the foundational model for building and improving organizational security programs. This series breaks down every function, category, and subcategory within the CSF, helping professionals, educators, and leaders understand how to apply the framework in real-world environments. Each episode delivers clear, practical explanations that connect framework concepts to daily security operations, governance, and risk management practices. Whether you’re new to cybersecurity or refining an established program, Framework gives you the tools and understanding to align your organization with one of the most trusted security models in the world. Listeners will gain insight into how the CSF’s five core functions—Identify, Protect, Detect, Respond, and Recover—work together to strengthen resilience and reduce cyber risk. The series also explores how organizations can tailor the CSF to their size, sector, and maturity level, integrate it with other standards, and measure progress through profiles and implementation tiers. With practical examples and step-by-step explanations, Framework helps you turn the structure of the CSF into a living, operational roadmap for security success. Developed by **BareMetalCyber.com**, Framework is designed to make cybersecurity standards understandable, actionable, and relevant. Tune in on your favorite platform and build the clarity, confidence, and competence to apply the NIST Cybersecurity Framework in your organization.

Publisher’s own description, taken unchanged from the podcast feed.
© 2026 Jason Edwards

Listen

Available at these services — the RSS feed works in any podcast app.

Latest episodes

  1. 2025-10-13 · 2 min

    Dive into a fast, no-fluff overview of what this podcast delivers, who it’s for, and how each episode helps you level up with practical, real-world takeaways. In this trailer, you’ll hear the show’s promise, the format…

  2. 2025-02-24 · 19 min · Episode 113

    RC.CO-04 involves sharing public updates on incident recovery using approved channels and messaging, such as breach notifications or preventative steps, to inform affected parties or the broader community. This ensures…

  3. 2025-02-24 · 19 min · Episode 112

    RC.CO-03 ensures recovery activities and progress are shared with designated stakeholders—like leadership and suppliers—consistent with response plans and agreements. This includes regular updates on restoration status,…

  4. 2025-02-24 · 19 min · Episode 111

    RC.RP-06 declares the end of recovery once predefined criteria are met, finalizing the process with a comprehensive after-action report detailing the incident, actions, and lessons learned. This formal closure ensures…

  5. 2025-02-24 · 19 min · Episode 110

    RC.RP-05 verifies the integrity of restored assets—checking for lingering threats or root causes—before returning systems to production, confirming normal operations. This involves testing restoration adequacy to ensure…

  6. 2025-02-24 · 19 min · Episode 109

    RC.RP-04 considers critical mission functions and cybersecurity risks to define post-incident operational norms, using impact records to prioritize restoration order. This involves collaboration with system owners to…

  7. 2025-02-24 · 18 min · Episode 108

    RC.RP-03 ensures backups and restoration assets are checked for integrity—free of compromise or corruption—before use in recovery efforts. This verification prevents reintroducing threats or using unreliable data,…

  8. 2025-02-24 · 19 min · Episode 107

    RC.RP-02 involves selecting, scoping, and prioritizing recovery actions based on incident response plan criteria and available resources, adapting as needs shift. This ensures efforts focus on critical systems first,…

  9. 2025-02-24 · 18 min · Episode 106

    RC.RP-01 initiates the recovery phase of the incident response plan once triggered, ensuring all responsible parties are aware of their roles and required authorizations. This begins during or after containment,…

  10. 2025-02-24 · 19 min · Episode 105

    RS.MI-02 ensures incidents are fully eradicated, removing threats like malware or unauthorized access through automated system features or manual responder actions. This can involve third-party support, such as MSSPs,…

Episode details from the publisher’s feed. Playback happens at the publisher.

Publisher details

Oldest episode in feed
02/2025 · over a year
Typical length
20 min
Format
Serial Meant to be heard in order
Keywords
cybersecurity, nist, technology, educational, certification, hacking, blue team, red team

Framework: The NIST Cybersecurity Framework (CSF) in the rankings

For podcasters

Is this podcast yours? Verify it — afterwards you can correct details, get the widget for your website, and we let you know when your podcast is nominated or wins.

Without an account you can use an email address on your show’s own domain — we create the account along the way. The other methods need a login.