NIST SP 800-160 VOL. 2 REV. 1

Cyber Resiliency Navigator V2

The Security Notebook Open source PDF ↗

INTERACTIVE CROSSWALK

From mission outcome
to implementation approach.

Navigate the hierarchy in Tables D-12 and D-13, or explore strategic and structural design principles and their relationships in Tables D-10, D-14, and D-15. Every item includes its NIST source location.

4Goals
8Objectives
14Techniques
50Approaches
5Strategic principles
14Structural principles

DESIGN GUIDANCE

Strategy into structure.

Strategic principles express risk management strategy. Structural principles guide design and implementation. Select either type to follow the NIST relationships in Tables D-10, D-14, and D-15.

S

Strategic principles

5 principles · risk strategy

T

Structural principles

14 principles · design guidance

ILLUSTRATIVE PATHS

Explore the framework through adversity.

Each scenario offers several defensible paths through the NIST relationships. These are teaching examples—not prescribed architectures, controls, or complete solutions.

SOURCE RELATIONSHIPS

See every connection at once.

Matrix directions differ: D-10: strategic principles drive structural principles. D-14: objectives are supported by strategic principles. D-15: structural principles guide the application of techniques. Select any row or column label to explore that construct.

TABLE D-10

Strategic principles driving structural principles

PDF pp. 136–137 ↗
TABLE D-14

Strategic principles supporting objectives

PDF p. 151 ↗
TABLE D-15

Structural principles guiding techniques

PDF pp. 151–152 ↗
● Required technique× Other related technique
TABLE D-12

Objectives supporting goals

PDF p. 148 ↗
TABLE D-13

Techniques and approaches achieving objectives

PDF pp. 149–151 ↗

PLAIN-LANGUAGE REFERENCE

Framework glossary.

Search the acronyms and supporting concepts used throughout the navigator. Select a term for a focused definition.

LOCAL PLANNING WORKSPACE

Your plan remains in this browser. Nothing is uploaded.

READING MODEL

Not a control catalog.
A decision framework.

NIST treats these constructs as linked choices rather than a mandatory sequence. Use the four-level hierarchy for outcomes and implementation, and the separate principles view for strategic and structural design guidance.

  1. 01

    Goal

    A broad mission or business outcome: anticipate, withstand, recover, or adapt.

  2. 02

    Objective

    A specific statement of what the system should achieve in its environment and life cycle.

  3. 03

    Technique

    A technology-neutral way to support one or more objectives.

  4. 04

    Implementation approach

    A more specific way to apply a technique. It still requires tailoring to your system.

Important: The mappings are many-to-many. A technique can support several objectives, and an objective usually needs several techniques. The navigator filters relationships; it does not imply that the visible path is the only valid path.

Source and scope

Definitions, descriptions, purposes, mappings, and examples are derived from NIST SP 800-160 Vol. 2 Rev. 1 (December 2021), especially Tables 2, 3, D-1, D-2, D-4, D-6, D-9, D-10, D-12, D-13, D-14, and D-15. Plain-language text is labeled separately. This tool is an offline learning aid, not a substitute for the publication or organization-specific engineering analysis.

Read the included publication ↗