What Changed In This Release
- Added NIST SP 800-172 (updated from the draft version), the China Data Security Law (DSL) and the China Privacy Law.
- Added SCF-R (Ransomware Protection), based on NISTIR 8374 (draft), Cybersecurity Framework Profile for Ransomware Risk Management.
- Added two threats to the threat catalog: MT-9 Human Error and MT-10 Technical / Mechanical Failure.
- Renamed 14 controls, mostly event logging controls in the MON domain.
- Wordsmithed 71 controls.
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.