Identify & Protect Functions

• Identify: Understand what assets you have (your attack surface) and what risks they face. This includes asset management, risk assessments, and understanding your organization’s context.
• Protect: Implement controls and remediate vulnerabilities to reduce the likelihood and impact of incidents, and ensure the reliable delivery of critical services.

---

Table of contents

• External Asset Inventory
• Internal Asset Inventory
• Security Awareness Training
• Third-Party Risk Management (TPRM)
• Vulnerability Management