Microsoft NIST & CSF
Microsoft and the NIST CSF
NIST Cybersecurity Framework (CSF) is a voluntary Framework that consists of standards, guidelines, and best practices to manage cybersecurity-related risks. Microsoft Cloud services have undergone independent, third-party FedRAMP Moderate and High Baseline audits and are certified according to the FedRAMP standards. Also, through a validated assessment performed by HITRUST, a leading security and privacy standards development and accreditation organization, Office 365 is certified to the objectives specified in the NIST CSF.
Mapping Microsoft Cyber Offerings to:
NIST Cybersecurity Framework (CSF), CIS Controls, ISO27001:2013 and HITRUST CSF