2 Part 2 – Implementation 2.1 Overview This section describes the tasks that must be completed to implement the minimum ICT standard. It is structured according to to the five functions of the NIST Framework Core (see 1.7.1). These five functions are: Identify, Protect, Detect, Respond and Recover. The tasks that must be completed (see table below) are categorised as follows: In each case, the first two letters (e.g. ‘ID’ = ‘Identify) refer to one of the five functions. The second pair of letters then refers to the category (e.g. ‘AM’ = ‘Asset Management’). Finally, the number designates the individual task. They are numbered sequentially within the category. For example, ‘ID.AM-1’ corresponds to the first task in the asset management category under the Identify function. An additional table of references to other international ICT standards has been added to each table listing tasks from the NIST Framework Core. These tables each reference a particular category, such as asset management. They are intended to make it easier for users which organise their ICT security according to other standards to map the present standard against their own. Minimum ICT standard 2018 14