Andersen DACH
Speciality: Comprehensive IT Penetration Testing including Web Applications, Mobile Apps, APIs, IoT Devices, Red Teaming, and GDPR/PII Compliance
German IT services and consulting firm specializing in software development, digital transformation, and penetration testing; offers authorized security assessments to identify vulnerabilities, with over 17 years of industry experience. Based in Germany; founded in 2007; operates globally.
NIST Cybersecurity Framework
Origin and Development
The NIST Cybersecurity Framework was created by the National Institute of Standards and Technology (NIST), a non-regulatory agency of the U.S. Department of Commerce. It was developed in response to Executive Order 13636, signed by President Obama in February 2013, which directed NIST to create a voluntary framework to help organizations manage cybersecurity risks. Released in February 2014 and updated in 2018 (version 1.1), the framework was designed to provide a common language and systematic approach for managing cybersecurity risks across critical infrastructure sectors.
Industry Value and Importance
The NIST Cybersecurity Framework is widely valued because it provides a flexible, cost-effective approach to managing cybersecurity risk that can be adapted by organizations of any size or sector. It has become a de facto standard in both the public and private sectors, often referenced in regulations, contracts, and compliance requirements. Organizations use it to assess their current security posture, communicate security requirements to vendors and partners, and demonstrate due diligence in protecting sensitive data. Its voluntary nature, combined with its comprehensive yet practical approach, has made it one of the most widely adopted cybersecurity frameworks globally.
- Siemens
- S&P Global
- Ryanair
- IHS Markit
- TUI
- Johnson & Johnson
- T-Systems