Frameworks & Standards
NIST Cybersecurity Framework
The NIST Cybersecurity Framework helps organizations manage cybersecurity risk. CSF 2.0 organizes outcomes around govern, identify, protect, detect, respond, and recover.
Buyer question
"Does Legra help us govern and evidence cybersecurity risk for critical data and AI knowledge assets?"
Legra fit
| CSF function | Legra fit | Status |
|---|---|---|
| Govern | Workspaces, ownership, membership, provenance, and branch policy make data governance explicit and queryable. | Partial fit |
| Identify | Catalogs, metadata, DIDs, nodes, branches, and workspace profiles help identify assets and relationships. | Native fit |
| Protect | Encryption, access controls, signed history, and validation help protect data confidentiality and integrity. | Native fit |
| Detect | Activity monitoring, events, validation reports, and commit history provide evidence, but SIEM integration remains external. | Partial fit |
| Respond | Revocation, investigation queries, branch review, and provenance support response workflows. | Partial fit |
| Recover | Version history and data exports can support recovery planning; test restoration procedures for your deployment. | Partial fit |
What Legra can say
Legra is relevant to NIST CSF because it makes data-control evidence part of the knowledge graph itself:
- Which workspace contains which asset.
- Which workspace contains it and who is responsible for it.
- Which identity had membership or delegated authority.
- Which commits changed the data.
- Which validation rules applied.
- Which branches reached production.
- Which events occurred during an incident or recovery workflow.
Assessment boundary
NIST CSF assessment also requires organizational governance, endpoint security, network security, incident response process, workforce controls, supplier controls, and executive risk decisions.
Legra supplies strong data-layer controls and evidence for a CSF-aligned cybersecurity program, while the overall CSF profile remains a buyer governance and operations responsibility.