Undergraduate Research at Jefferson Lab

Cybersecurity Framework Profile

Student: Noelle Phillips

School: Salt Lake Community College

Mentored By: Joseph Knowles

A current profile for Jefferson lab will provide a comprehensive inventory of the information security procedures and controls currently implemented and further identify, analyze, and manage cyber risks. The National Institute of Standards and Technology (NIST) has developed a guide for organizations to use in improving vital infrastructure cybersecurity. The Framework consists of a Framework Core, Implementation Tiers and Profiles. An organization can utilize the Framework by creating individual profiles consisting of the core cybersecurity activities and determining the levels of implementation. The Jefferson Lab does not have a current completed profile. By analyzing documentation of measures currently in place, in comparison to the Framework, a current profile is being drafted. The finished profile will aid departments in continued cybersecurity risk management, by considering practices that most benefit the lab as an individual organization. The individualized approach will benefit the privacy of the lab's staff and users, while also providing direction for workforce development and evolving cybersecurity activities. The profile will enable the lab to apply the principles and best practices of cybersecurity risk management to continue to improve security and resilience of critical infrastructure.

[Watch the presentation on YouTube]