Analysis of the AESCSF framework

On the Agenda:

• What problem was the AESCSF designed to address for the sector and how does it differ from other standards such as NIST CSF, CIS, IEC 62443?  
• Which of the 11 AESCSF domains do organisations most commonly underestimate or struggle to implement effectively?
• How can organisations practically use the AESCSF to improve resilience, not just compliance reporting?
• For organisations already aligned to other security frameworks, what are the key considerations when cross-mapping or integrating AESCSF requirements?
• Is AESCSF a good fit for Kiwi organisations?

‍