Resources

NIST Cybersecurity Framework ↗

The core framework for organizing security capabilities around Identify, Protect, Detect, Respond, and Recover.

SABSA Framework ↗

Enterprise security architecture framework used widely in large-scale deployments.

TOGAF Security Architecture ↗

Security architecture guidance within the TOGAF enterprise architecture framework.

NIST SP 800-207: Zero Trust Architecture ↗

The authoritative NIST publication defining Zero Trust architecture principles and deployment models.

CISA Zero Trust Maturity Model ↗

CISA's guidance on Zero Trust adoption across five pillars: Identity, Devices, Networks, Applications, and Data.

CIS Controls ↗

Prioritized set of actions for cyber defense. Useful for understanding what controls matter most.

MITRE ATT&CK Framework ↗

Adversary tactics and techniques knowledge base. Essential for detection engineering and threat modeling.

NSA/CISA Network Security Best Practices ↗

Practical guidance on network segmentation, hardening, and monitoring from NSA and CISA.

CSA Cloud Controls Matrix ↗

Cloud-specific security controls framework from the Cloud Security Alliance.

AWS Security Best Practices ↗

AWS Well-Architected Framework security pillar — useful regardless of your primary cloud.

Sigma Rules ↗

Generic signature format for SIEM systems. Great starting point for detection content.

Detection Engineering Maturity Matrix ↗

Kyle Bailey's model for assessing and improving detection engineering capability.

ISO/IEC 27001 ↗

International standard for information security management systems.

SOC 2 Overview ↗

Trust Services Criteria used for service organization controls reporting.

SANS Reading Room ↗

Free research papers on a wide range of security topics. Good depth without requiring a subscription.

ISACA ↗

Professional association for IS audit, control, security, and governance.