[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-354508-105":53,"doc-detail-354508-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","nist-cybersecurity-framework-sans-policy-templates","NIST Cybersecurity Framework - SANS Policy Templates","","Guide mapping the NIST Cybersecurity Framework (NIST CSF) to ready-to-use SANS policy templates. It aligns NIST functions and subcategories (e.g., ID.AM-5, PR.AC-3, PR.DS-7, PR.IP-9, DE.AE-3, RS.RP-1) with specific organizational policy templates such as Acquisition Assessment Policy, Remote Access Policy, Lab Security Policy, Data Breach Response Policy, and Disaster Recovery Plan Policy. The templates support building and advancing cybersecurity policy programs for SLTT organizations.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/nist-cybersecurity-framework-sans-policy-templates/354508/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/nist-cybersecurity-framework-sans-policy-templates/354508.png","ImageObject",442,249,{"name":88,"@type":89},"Fans","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-21","2026-09-22",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",7,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of the NIST CSF to SANS Policy Templates guide?","Question",{"text":109,"@type":110},"It provides a correlation between NIST CSF subcategories and applicable SANS policy templates, helping organizations apply and advance cybersecurity policies using the templates as an outline.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How does the guide represent NIST subcategories?",{"text":114,"@type":110},"Each NIST subcategory is shown with an identifier like “ID.AM-5,” alongside the related NIST function and category (for example, Identify and Asset Management).",{"name":116,"@type":107,"acceptedAnswer":117},"Which NIST functions are covered in the template mapping?",{"text":118,"@type":110},"The guide covers NIST Functions including Identify, Protect, Detect, and Respond, linking each to relevant SANS policy templates.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},354508,1791733784,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":79},5909892330395,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","NIST Cybersecurity Framework  \nSANS Policy Templates  \n1  \nThe Multi-State Information Sharing & Analysis Center (MS-ISAC) is offering this guide to the SLTT community, as a resource to assist with the application and advancement of cybersecurity policies.  \nThe policy templates are provided courtesy of the SANS Institute ( [https://www](https://www). [sans.org/](sans.org/)). The templates can be used as an outline of an organizational policy, with additional details to be added by the end user.  \nThe framework referenced in this guide is the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) ([https://www.nist.gov/](https://www.nist.gov/)). This guide gives the correlation between 35 of the NIST CSF subcategories, and applicable SANS policy templates. A NIST subcategory is represented by text, such as “ID.AM-5”. This represents the NIST function of Identify and the category of Asset Management.  \nFor additional information on services provided by the Multi-State Information Sharing & Analysis Center (MS-ISAC), please refer to the following page: [https://www](https://www). [cisecurity.org/ms-isac/services](cisecurity.org/ms-isac/services/)[/](cisecurity.org/ms-isac/services/).  \n2019 NCSR • SANS Policy Templates  \n2  \nNIST Function: Identify  \nIdentify – Asset Management (ID.AM)  \nID.AM-5 Resources (e.g., hardware, devices, data, time, and software) are prioritized based on their classification, criticality, and business value) .  \nSANS Policy Template: Acquisition Assessment Policy  \nIdentify – Supply Chain Risk Management (ID.SC)  \nID.SC-2 Suppliers and third-party partners of information systems, components, and  \nservices are identified, prioritized, and assessed using a cyber supply chain risk assessment process.  \nSANS Policy Template: Acquisition Assessment Policy  \nID.SC-4 Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.  \nSANS Policy Template: Acquisition Assessment Policy  \nID.SC-5 Response and recovery planning and testing are conducted with suppliers and thirdparty providers.  \nSANS Policy Template: Security Response Plan Policy  \n2019 NCSR • SANS Policy Templates  \n3  \nNIST Function: Protect  \nProtect – Identity Management and Access Control (PR.AC)  \nPR.AC-3 Remote access is managed.  \nSANS Policy Template: Remote Access Policy  \nPR.AC-5 Network integrity is protected (e.g., network segregation, network segmentation) .  \nSANS Policy Template: Lab Security Policy  \nSANS Policy Template: Router and Switch Security Policy  \nProtect – Data Security (PR.DS)  \nPR.DS-3 Assets are formally managed throughout removal, transfers, and disposition.  \nSANS Policy Template: Acquisition Assessment Policy  \nSANS Policy Template: Technology Equipment Disposal Policy  \nPR.DS-7 The development and testing environment(s) are separate from the production environment.  \nSANS Policy Template: Lab Security Policy  \nSANS Policy Template: Router and Switch Security Policy  \nPR.DS-8 Integrity checking mechanisms are used to verify hardware integrity.  \nSANS Policy Template: Acquisition Assessment Policy  \nProtect – Information Protection Processes and Procedures (PR. IP)  \nPR.IP-4 Backups of information are conducted, maintained, and tested.  \nSANS Policy Template: Disaster Recovery Plan Policy  \nPR.IP-6 Data is destroyed according to policy.  \nSANS Policy Template: Technology Equipment Disposal Policy  \nPR.IP-9 Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed.  \nSANS Policy Template: Data Breach Response Policy  \nSANS Policy Template: Disaster Recovery Plan Policy   \nSANS Policy Template: Pandemic Response Planning  \nSANS Policy Template: Security Response Plan Policy  \n2019 NCSR • SANS Policy Templates  \n4  \nPR.IP-10 Response and recovery plans are tested.  \nSANS Policy Template: Data Bre","cbCaigH1eGtltuHN","https://ap.wps.com/l/cbCaigH1eGtltuHN","pdf",146546,10,"English","# NIST Cybersecurity Framework\n## SANS Policy Templates Mapping\n## NIST Function: Identify\n## NIST Function: Protect\n## NIST Function: Detect\n## NIST Function: Respond","[{\"question\":\"What is the purpose of the NIST CSF to SANS Policy Templates guide?\",\"answer\":\"It provides a correlation between NIST CSF subcategories and applicable SANS policy templates, helping organizations apply and advance cybersecurity policies using the templates as an outline.\"},{\"question\":\"How does the guide represent NIST subcategories?\",\"answer\":\"Each NIST subcategory is shown with an identifier like “ID.AM-5,” alongside the related NIST function and category (for example, Identify and Asset Management).\"},{\"question\":\"Which NIST functions are covered in the template mapping?\",\"answer\":\"The guide covers NIST Functions including Identify, Protect, Detect, and Respond, linking each to relevant SANS policy templates.\"}]","NIST Cybersecurity Framework - SANS Policy Templates | PDF",1790111477]