Threat Emulation vs. Penetration Testing: Understanding the Differences

This was originally posted as an Insight from Wolf & Company, P.C. Threat emulation (also referred to as adversary simulation) is an advanced form of testing where the attack tools, techniques, and procedures (TTPs) utilized are based on documented, real-world criminal actions. These tests are best suited for environments and organizations that have the basics covered … Continue reading Threat Emulation vs. Penetration Testing: Understanding the Differences →

NIST CSF: Adaptive Tier

The NIST Cybersecurity Framework (CSF) is a framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce their cybersecurity risks. In addition to the core functions of the CSF, the framework also includes four levels or "tiers" that provide guidance on how organizations can implement the framework and … Continue reading NIST CSF: Adaptive Tier →

NIST CSF: Repeatable Tier

The NIST Cybersecurity Framework (CSF) is a framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce their cybersecurity risks. In addition to the core functions of the CSF, the framework also includes four levels or "tiers" that provide guidance on how organizations can implement the framework and … Continue reading NIST CSF: Repeatable Tier →

NIST CSF: Risk Informed Tier

The NIST Cybersecurity Framework (CSF) is a framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce their cybersecurity risks. In addition to the core functions of the CSF, the framework also includes four levels or "tiers" that provide guidance on how organizations can implement the framework and … Continue reading NIST CSF: Risk Informed Tier →

NIST CSF: Partial Tier

The NIST Cybersecurity Framework (CSF) is a framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce their cybersecurity risks. In addition to the core functions of the CSF, the framework also includes four levels or "tiers" that provide guidance on how organizations can implement the framework and … Continue reading NIST CSF: Partial Tier →