Certain outcomes are generally consistent across security teams globally. While the methods used and the completeness/depth of the outcomes will vary greatly by the size of the organization and the sensitivity of the information they store/process, many outcomes are universal. In the U.S., the National Institute of Standards and Technology (NIST) has created a framework that can help understand and perform evaluations against these common outcomes, called the Cybersecurity Framework (CSF). Using the CSF, this document reviews how VMware Tanzu® Application Service™ (Tanzu Application Service) helps security teams achieve a number of their key outcomes for applications running on the platform. The five core functions captured in the framework are listed below. Organizations should continuously evaluate their application of the functions and the associated activities as part of their effort to address the dynamic cybersecurity risk.
- Identify - Understand the organization and its assets to manage cybersecurity risk.
- Protect - Implement the people, processes, and technologies needed to prevent cybersecurity events/incidents from affecting critical services or data.
- Detect - Develop integrated measures to identify a cybersecurity event/ incident and the affected systems/services/data.
- Respond - Prepare (and practice) measures to contain the impact of an identified cybersecurity incident
- Recover - Maintain effective plans to return to normal operations following a cybersecurity incident.
