94 TERMS / PLAIN ENGLISH
Decode the language.
Definitions with examples, related concepts, and flashcards to help ideas stick.
Open the glossary ↗✳ The reference desk
Clarity, on demand.
Decode a term, place a framework in context, or figure out where a product fits. A reference for the questions that come up while you’re doing the work.
6 FRAMEWORK GUIDES
Know what it’s for.
Standards, control catalogs, threat knowledge, and risk frameworks. Similar words, different jobs.
Compare frameworks ↗MARKET ORIENTATION
Untangle the toolset.
Understand the job before choosing the product. Learn what each segment does and where it stops.
Explore product segments ↗Begin with the job to be done.
| If you need to… | Start here | Ask next |
|---|---|---|
| Organize a security program | NIST CSF | Which outcomes matter most to this organization? |
| Prioritize practical safeguards | CIS Controls | What can our team implement and operate? |
| Build an information security management system | ISO/IEC 27001 | What is the system’s scope and evidence? |
| Reason about adversary behavior | MITRE ATT&CK | What can we actually observe and detect? |