Why AI means going back to cybersecurity basics
The rise of AI has changed the threat landscape completely, but it hasn’t changed the rules of great defense. CSO recently published my piece exploring this exact shift: AI is …
Practical Risk Management Using Real-World Cyber Incidents
Practical Risk Management Using Real-World Incidents
Order Your Copy Wherever Books Are Sold
The NIST 2.0 Cybersecurity Framework delivers clear guidance on applying the gold standard NIST framework in complex, real-world situations. Drawing on her extensive cybersecurity research and reporting, author Cynthia Brumfield explains how to identify risks, defend against threats, and recover from incidents using compelling case studies.

The NIST Cybersecurity Framework (CSF) 2.0: Practical Risk Management Using Real-World Incidents gives cybersecurity practitioners, risk managers, and business leaders a concrete foundation for closing that gap. Drawing on extensive cybersecurity research and reporting, author Cynthia Brumfield walks readers through the gold-standard NIST framework using the case studies and real-world incidents that make it stick — showing not just what the framework says, but how organizations have succeeded and failed applying it under pressure.

If you’re responsible for securing systems, evaluating risk, managing compliance, or making strategic decisions about cybersecurity — this book was written for you.
The NIST CSF 2.0 bridges the gap between technical controls and business reality, giving practitioners, risk managers, auditors, business leaders, and students a shared language and a concrete methodology for applying the framework where it matters most: in the real world.

The rise of AI has changed the threat landscape completely, but it hasn’t changed the rules of great defense. CSO recently published my piece exploring this exact shift: AI is …
Gene Spafford on why artificial intelligence is exposing decades of neglected security practices—and why frameworks like NIST CSF 2.0 matter more than ever. Photo by Thatselby on Unsplash Artificial intelligence …
After four years, my next book on the NIST 2.0 CSF is here! The NIST 2.0 Cybersecurity Framework: Practical Risk Management Using Real-World Incidents arrives at a time when organizations …
Contact me about virtual and in-person presentations to your team that will give them dynamic insight into the importance and philosophy of good cybersecurity risk management. All presentations come with bulk book purchases.