ConceptsCertifiable vs Reference
Certifiable vs Reference
A distinction between security frameworks you can be formally certified against (like ISO 27001) and reference frameworks meant as guidance you adopt and adapt (like the NIST Cybersecurity Framework). The type changes how you use the framework.
0 direct links6 lessons
Concept Neighborhood
No connected concepts linked yet.
Related Lessons
6 lessons cover this conceptThe Framework Landscape
Governance / Risk / Compliance
NIST CSF and SP 800-53 in Practice
Governance / Risk / Compliance
ISO 27001 and SOC 2 as Trust Mechanisms
Governance / Risk / Compliance
CIS Controls: Prioritized Security Implementation
Governance / Risk / Compliance
Industry Frameworks: PCI DSS, HIPAA, HITRUST, and FedRAMP
Governance / Risk / Compliance
Framework Selection and Combination in Practice
Governance / Risk / Compliance
Sign in to open lesson content directly.