<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>NIST on Sammy Farida</title><link>https://me.itsecurity.network/tags/nist/</link><description>Recent content in NIST on Sammy Farida</description><generator>Hugo -- 0.147.3</generator><language>en</language><lastBuildDate>Fri, 19 Sep 2025 07:00:46 -0400</lastBuildDate><atom:link href="https://me.itsecurity.network/tags/nist/index.xml" rel="self" type="application/rss+xml"/><item><title>From Blind Spots to Insights: The CDM Revolution</title><link>https://me.itsecurity.network/blog/from-blind-spots-to-insights-the-cdm-revolution/</link><pubDate>Fri, 19 Sep 2025 07:00:46 -0400</pubDate><guid>https://me.itsecurity.network/blog/from-blind-spots-to-insights-the-cdm-revolution/</guid><description>How Continuous Diagnostics and Mitigation (CDM) is transforming security assessment by replacing inadequate point-in-time testing with real-time visibility, reducing breach detection times by 76% and eliminating critical security blind spots.</description></item><item><title>The 15-Minute Incident Response Playbook (Based on NIST)</title><link>https://me.itsecurity.network/blog/the-15-minute-incident-response-playbook/</link><pubDate>Wed, 20 Aug 2025 07:01:12 -0400</pubDate><guid>https://me.itsecurity.network/blog/the-15-minute-incident-response-playbook/</guid><description>A concise, action-oriented incident response playbook based on the NIST framework. Learn how security teams can respond confidently to ransomware, data breaches, and insider threats in just 15 minutes.</description></item><item><title>NIST CSF 2.0: An Architectural Revolution</title><link>https://me.itsecurity.network/blog/nist-csf-2-0-architectural-revolution/</link><pubDate>Wed, 06 Aug 2025 00:24:24 -0400</pubDate><guid>https://me.itsecurity.network/blog/nist-csf-2-0-architectural-revolution/</guid><description>NIST CSF 2.0 introduces the &amp;#39;Govern&amp;#39; function, fundamentally shifting security from just technical controls to a comprehensive, governance-led approach. This post explores the architectural implications for security programs.</description></item><item><title>macOS Security Hardening for Enterprise</title><link>https://me.itsecurity.network/blog/macos-security-hardening-for-enterprise/</link><pubDate>Fri, 01 Aug 2025 00:56:53 -0400</pubDate><guid>https://me.itsecurity.network/blog/macos-security-hardening-for-enterprise/</guid><description>Learn how to use the macOS Security Compliance Project (mSCP) to automate security baselines, achieve compliance with standards like CIS and NIST, and systematically harden Apple devices at scale.</description></item></channel></rss>