Cavirin actively supports and contributes to The National Institute of Standards and Technology (NIST) set of cybersecurity guidelines and standards of recommended security controls for information systems at government agencies.

NIST Cybersecurity Framework

Cavirin and NIST Cybersecurity Guidelines

The set of NIST cybersecurity guidelines provides key foundational guidance in creating an effective cybersecurity posture.  Cavirin's support is multifacited, spanning NIST 800-53r4, 800-171, and most recently, the NIST Cybersecurity Framework (CSF).  This last document, still in final draft, provides organizations with a structure to apply the principles and best practices of risk management to improving the security and resilience of their critical infrastructures.  It leverages currently available standards and guidelines such as ISO, CIS, and NIST to create this guidance.  Cavirin’s security team has analyzed this document and translated the guidance into a set of technical controls that help organizations automatically align to the document’s recommendations.

Cavirin's comprehensive NIST support spans: 

  • The NIST Cybersecurity Framework
  • NIST 800-53r4 - Security and Privacy Controls for Federal Information Systems and Organizations
  • NIST 800-171 - Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations

Implementing the NIST Cybersecurity Framework (Infographic)

This latest infographic walks a user through the areas for implementing the NIST Cybersecurity Framework (CSF) including:  
  • CSF goals
  • The CSF Process
  • How Tiers impact target profiles
  • Mapping to the Target of Evaluation
  • Cavirin's workflow alignment to the CSF process

Cavirin Adds the NIST Cybersecurity Framework to its Hybrid Cloud Security Assessment and Remediation Platform

Enables Enterprises to Automatically Adopt Best Practices

 “NIST is a comprehensive cybersecurity-based control framework that integrates various security technologies and mechanisms into an integrated framework,” said Pravin Goyal, Cavirin Director of Information Security and Compliance Engineering.  “Given our expertise in cybersecurity, we have interpreted the framework and translated it into a set of automated controls that are easy to implement and automate for any sized business. This is a huge win for any businesses that are looking to implement the NIST Cybersecurity Framework to holistically manage their cybersecurity risk.” Read Press Release 

Implementing the NIST Cybersecurity Framework Shouldn’t be Scary

The NIST Cybersecurity Framework provides key foundational guidance for improving an organizations' security posture and creating an effective cyber resilient infrastructure.  Introduced in 2014, it was originally intended to protect critical infrastructure, but with the rising threat of cyberattacks it is now being adopted by numerous businesses proactively looking to protect their critical assets.

Watch this on-demand webinar as cybersecurity and compliance experts, Pravin Goyal and Anupam Sahai, review the five NIST Cybersecurity Framework functions and provide insight on successfully implementing and automating CSF across cloud, on-premise, and hybrid cloud infrastructures.

More on Cavirin

Watch Product Intro and Demo

Get NIST Security Risk Score


Cavirin provides security management across physical, public, and hybrid clouds, supporting AWS, Microsoft Azure, Google Cloud Platform, VMware, KVM, and Docker.