9 min read
Multi-Tenant M365 Security Management: Understand and Take Command
Most MSPs don’t discover security gaps because they were looking for them. They find them mid-ticket, during a breach, or when a client...
We are pleased to announce the availability of the NIST CSF 2.0 Baseline on the CloudCapsule platform.
Partners and Clients can now compare assessment results against the NIST standard, clearly identifying areas that are compliant, and controls that may need improvement, whether that be a technical control or a policy element.
The NIST Cybersecurity Framework (CSF) 2.0 is a comprehensive guide designed to help organizations manage and reduce cybersecurity risks. It provides a structured approach to identifying, assessing, and mitigating cybersecurity threats through a set of high-level outcomes and best practices.
The framework is adaptable to organizations of any size, sector, or maturity level, making it widely applicable across various industries. By using the NIST CSF 2.0, businesses can better understand their cybersecurity posture, prioritize their efforts, and communicate their strategies effectively.
This framework does not prescribe specific solutions but links to resources that offer detailed guidance on achieving desired cybersecurity outcomes, thereby enhancing overall resilience and security.
Follow these simple steps to use the NIST CSF 2.0 Baseline in your assessments.

Scroll down to review the NIST Overview and click on any gauge or individual pass/fail/assumed risk indicator for more detailed information.

Simply click on an individual control for more information on results, suggested remediation, and impacted elements.

Augment the controls with your own evidence, 3rd party coverage, and/or assumed risk.

For more information on NIST, please see the following links:
https://www.nist.gov/cyberframework
https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-csf-20/final
9 min read
Most MSPs don’t discover security gaps because they were looking for them. They find them mid-ticket, during a breach, or when a client...
4 min read
Here’s something that bothers me about the MSP industry: we hand technicians the keys to dozens, sometimes hundreds, of Microsoft 365...
6 min read
Every lawyer I’ve ever talked to has the same problem.They get staffed on a new case or a new deal, and someone hands them a stack of...