To properly implement and manage cybersecurity based on the NIST CSF, the U.S. Department of Homeland Security recommends involving across-functional team representing business, operations, security, information technology, and maintenance areas, including those responsible for:
- IT Policy and Governance (e.g., Chief Information Security Officer)
- Business Operations (e.g., Operations Manager)
- IT Security Planning and Management (e.g., Director of Information Technology)
- Business Continuity and Disaster Recovery Planning (e.g., BC/DR Manager)
- IT Infrastructure (e.g., Network/System Administrator)
- Risk Management (e.g., Enterprise/Operations Risk Manager)
- IT Operations (e.g., Configuration/Change Managers)
- Procurement and Vendor Management (e.g., Contracts and Legal Support Managers)