--- title: "Standards and Framework Guides | Firevault" description: "Guides to NIST CSF 2.0, the NCSC Cyber Assessment Framework, ISA/IEC 62443 and MITRE ATT&CK: what each requires and how to evidence it." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/learn/guides/standards#webpage", "url": "https://fire-vault.com/learn/guides/standards", "name": "Standards and Framework Guides", "description": "Guides to NIST CSF 2.0, the NCSC Cyber Assessment Framework, ISA/IEC 62443 and MITRE ATT&CK: what each requires and how to evidence it.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-learn.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/learn/guides/standards#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/learn/guides/standards#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Standards guides", "item": "https://fire-vault.com/learn/guides/standards" } ] }, { "@context": "https://schema.org", "@type": "CollectionPage", "name": "Firevault Standards and Framework Guides", "description": "Guides to NIST CSF 2.0, the NCSC Cyber Assessment Framework, ISA/IEC 62443 and MITRE ATT&CK, and where physical controls contribute.", "mainEntityOfPage": "/learn/guides/standards", "author": { "@type": "Person", "name": "Mark Fermor" }, "publisher": { "@type": "Organization", "name": "Firevault" }, "hasPart": [ { "@type": "Article", "headline": "NIST CSF 2.0", "url": "https://fire-vault.com/learn/guides/nist-csf-2-0-guide", "about": "NIST" }, { "@type": "Article", "headline": "NCSC Cyber Assessment Framework", "url": "https://fire-vault.com/learn/guides/ncsc-caf-guide", "about": "NCSC" }, { "@type": "Article", "headline": "ISA/IEC 62443", "url": "https://fire-vault.com/learn/guides/iec-62443-guide", "about": "ISA/IEC" }, { "@type": "Article", "headline": "MITRE ATT&CK Mapping", "url": "https://fire-vault.com/learn/guides/mitre-attack-mapping-guide", "about": "MITRE" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Why OSS # Standards and Framework Guides What the recognised standard or framework actually requires, how assessment works, what counts as evidence, and only then where a physical control such as Offline Secure Storage® can contribute to satisfying it. Book a demo ![Corridor of offline storage racks inside a Firevault bunker](/assets/hero-square-bunker-B6Y7Qt9r.jpg) S1 ## Read the requirement before the remedy Some of these certify, some assess, and one is a knowledge base that certifies nothing. Each guide is explicit about which it is, because that determines what an auditor, a regulator or an underwriter will accept as evidence. No product certifies an organisation against any of them. [ NIST · Voluntary framework ### NIST CSF 2.0 The six Functions, including Govern, what each one asks you to evidence, how Tiers and Profiles are meant to be used, and the difference between adopting the language and improving the outcome. Read the guide ](/learn/guides/nist-csf-2-0-guide)[ NCSC · Assessment framework ### NCSC Cyber Assessment Framework The four Objectives, the underlying Principles, how Indicators of Good Practice are assessed as achieved, partially achieved or not achieved, and how the CAF is used by regulators. Read the guide ](/learn/guides/ncsc-caf-guide)[ ISA/IEC · Certifiable standard ### ISA/IEC 62443 Zones and conduits, security levels, the difference between capability and achieved security level, and which parts of the series apply to asset owners rather than product suppliers. Read the guide ](/learn/guides/iec-62443-guide)[ MITRE · Knowledge base ### MITRE ATT&CK Mapping Tactics, techniques and sub-techniques, the Enterprise and ICS matrices, how to map coverage without flattering yourself, and why a versioned knowledge base is not a compliance framework. Read the guide ](/learn/guides/mitre-attack-mapping-guide) ## The other two guide families [Role guides](/learn/guides/by-role) cover who is making the decision and what evidence that seat should expect. [Technical guides](/learn/guides/technical) cover how the architecture and the controls actually work. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Which offline secure storage solution is right for you? Answer a few quick questions and we will recommend the right solution, whether that is a personal vault or a scalable offline storage system built for your needs. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up