[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-ir":3},{"item":4,"lessons":16,"controls":26,"related":52},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-ir","PR.IR-01","PR.IR: Technology Infrastructure Resilience",2,"US National Institute of Standards and Technology (NIST)","**What it asks for.** This category asks that security architectures are managed in line with the organisation's risk strategy to protect the confidentiality, integrity and availability of assets and to make the organisation resilient. It covers protecting networks from unauthorised logical access, environmental threats, resilience mechanisms and adequate capacity.\n\n**In practice.** Networks are segmented according to trust and function, with controls on traffic between zones and on remote access. Critical systems have redundancy, failover and capacity planning, and facilities are protected against power loss, fire and similar threats. Resilience requirements are set from business impact analysis and tested. Evidence includes network diagrams, firewall and segmentation rule reviews, capacity reports, failover test results and data centre or cloud provider assurance reports.\n\n**Common gaps.** Organisations often have flat internal networks, undocumented exceptions in firewall rules and single points of failure in key services. Resilience is frequently assumed from cloud providers rather than designed and tested.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22],{"slug":19,"title":20,"published_at":21},"ai-powered-autonomous-attacks-exploit-internet-facing-systems-via-agentic-frameworks","AI-Powered Autonomous Attacks Exploit Internet-Facing Systems via Agentic Frameworks","2026-07-31T12:20:45.485+00:00",{"slug":23,"title":24,"published_at":25},"cisa-urges-critical-infrastructure-to-plan-for-ot-isolation-during-cyberattacks","CISA Urges Critical Infrastructure to Plan for OT Isolation During Cyberattacks","2026-07-28T20:20:52.084+00:00",[27,32,36,40,44,48],{"slug":28,"name":29,"problem":30,"stories":31},"patch-management","Automated patch management","Known holes get closed in days, not months.",1,{"slug":33,"name":34,"problem":35,"stories":31},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":37,"name":38,"problem":39,"stories":31},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":41,"name":42,"problem":43,"stories":31},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",{"slug":45,"name":46,"problem":47,"stories":31},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":49,"name":50,"problem":51,"stories":31},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[53,58,62,67,72,76,80,84],{"family":54,"item":55,"code":56,"title":57,"together":9},"cis","12","Control 12","Network Infrastructure Management",{"family":54,"item":59,"code":60,"title":61,"together":9},"13","Control 13","Network Monitoring and Defense",{"family":63,"item":64,"code":65,"title":66,"together":31},"iso-27001","a-8-20","Annex A 8.20","ISO\u002FIEC 27001:2022 Annex A 8.20: Networks security",{"family":68,"item":69,"code":70,"title":71,"together":31},"iec-62443","3-3","62443-3-3","IEC 62443-3-3: System security requirements and security levels",{"family":73,"item":74,"code":75,"title":75,"together":31},"itil","overview","ITIL",{"family":63,"item":77,"code":78,"title":79,"together":31},"a-8-8","Annex A 8.8","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of technical vulnerabilities",{"family":54,"item":81,"code":82,"title":83,"together":31},"7","Control 7","Continuous Vulnerability Management",{"family":54,"item":85,"code":86,"title":87,"together":31},"17","Control 17","Incident Response Management"]