Library
Trusted Frameworks and Foundational Security References
The cybersecurity framework library gives visitors a reliable place to explore foundational documents, industry references, and important security frameworks. Many cybersecurity leaders rely on standards and formal guidance to shape policies, assess maturity, support compliance, and align security programs with business expectations. This page helps make those resources easier to understand and more practical to use.
Instead of leaving readers to sort through dense documentation on their own, the library provides clear context around what each resource is, why it matters, and how it fits into a broader security program. That makes it especially useful for leaders comparing frameworks, preparing for governance discussions, or building a more structured approach to control design and risk management.
The page adds value by turning authoritative references into accessible decision-support material. Visitors can use it to strengthen their understanding of well-known standards, connect requirements to strategy, and build a stronger foundation for conversations around compliance, architecture, resilience, and enterprise security governance.
Please note: All materials are subject to our Terms of Use
ISO/IEC 27001
Information Security Management System Standard
Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile
NIST guidance for applying the AI RMF to generative-AI risks.
Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations
NIST’s common language for machine-learning attacks and mitigations.
NIST SP 800-207
NIST’s Reference Architecture for Zero Trust
CISA Zero Trust Maturity Model 2.0
A Capability Roadmap for Zero Trust
Known Exploited Vulnerabilities Catalog (KEV)
CISA’s Catalog for Exploitation-Based Vulnerability Prioritization
INCOSE Systems Engineering Handbook
Systems Engineering Body of Knowledge
NIST SP 800-160
Engineering Trustworthy Secure Systems