Documentation index¶
Reading order for a new CDC programme: 00 → 09 (start here) → 10 (pick tier) → 01–06 (functions) with 07–08 as lenses → 11–13 (organisation & operations) → 14–16 (advanced/community) → 17–18 (regulatory & CIS crosswalks). 19 holds all credits. Dependency markers [GATE]/[HARD]/[SOFT] are defined in 00.
| # | File | Area |
|---|---|---|
| 00 | 00-introduction.md | Purpose, principles, scope boundary, dependency markers |
| 01–06 | 01-govern … 06-recover | The six NIST CSF 2.0 functions |
| 07 | 07-cia-triad.md | CIA as design lens |
| 08 | 08-maturity-model.md | Maturity levels & scoring |
| 09 | 09-start-here.md | Prioritisation: 90 days / year 1 |
| 10 | 10-tiers.md | Essential / Standard / Advanced overlay |
| 11 | 11-operating-models.md | MSSP / tiered / capability-based / shared |
| 12 | 12-roles-and-competences.md | ECSF-based roles & skills |
| 13 | 13-cdc-operations.md | Tuning, detection-as-code, team, automation, tools |
| 14 | 14-detection-as-code-deep-dive.md | Advanced: engineering manual |
| 15 | 15-cti-deep-dive.md | Advanced: CTI programme |
| 16 | 16-csirt-community.md | Community, certification, living docs |
| 17 | 17-eu-regulatory-landscape.md | EU law layer (+ annexes/) |
| 18 | 18-cis-controls-crosswalk.md | CIS Controls with concrete actions |
| 19 | 19-references.md | Sources & credits |