NIST Cybersecurity Certified Professional

NIST Cybersecurity Certified Professional

Domains Validated by NIST Cybersecurity Certified Professional

1. Cybersecurity Governance and Program Management

• Cybersecurity governance, strategy, and policy development
• Enterprise risk management and organizational accountability
• Alignment with NIST CSF and enterprise objectives
• Control governance using NIST SP 800-53 control families

2. Risk Management and System Categorization

• Risk management concepts and processes
• System and information categorization (FIPS 199 / 200)
• Risk assessment and authorization concepts
• Integration of cybersecurity risk into business decision-making

3. Security Control Framework (NIST SP 800-53)

• Structure and purpose of NIST SP 800-53 Rev. 5
• Control selection, tailoring, and baselining
• Security and privacy control families (organizational, technical, and operational)
• Control implementation statements

4. Security Control Implementation and Operation

• Implementation of technical, administrative, and physical controls
• Configuration management and secure baselines
• Identity, credential, and access management (ICAM)
• Continuous control operation and maintenance

5. Continuous Monitoring and Security Assessment

• Continuous monitoring strategy
• Control assessment and testing methods
• Security metrics and reporting
• Authorization to Operate (ATO) lifecycle concepts

6. Detection and Threat Management

• Event logging and monitoring
• Anomaly detection and threat intelligence
• Security information and event management (SIEM) concepts
• Detection controls aligned with NIST SP 800-53

7. Incident Response (NIST SP 800-61)

• Incident response lifecycle (Preparation, Detection & Analysis, Containment, Eradication & Recovery, Post-Incident Activity)
• Incident classification and prioritization
• Coordination with internal teams and external entities
• Evidence handling and forensic considerations

8. Cyber Resilience and Recovery

• Recovery planning and execution
• Integration with business continuity and disaster recovery
• Post-incident improvement and resilience enhancement
• Lessons learned and corrective actions

9. Supply Chain and Third-Party Cyber Risk

• ICT supply chain risk management (SCRM)
• Third-party security assessment and monitoring
• Contractual and compliance considerations
• Relevant SP 800-53 controls for supply chain security

10. Continuous Improvement and Program Maturity

• Cybersecurity maturity models
• Continuous improvement strategies
• Program effectiveness evaluation
• Alignment with evolving threats and organizational changes