Frequently asked questions about NIST Cybersecurity Framework

Frequently asked questions about NIST Cybersecurity Framework

Terms & Conditions

活动对象:华为云电销客户及渠道伙伴客户可参与消费满送活动,其他客户参与前请咨询客户经理

活动时间: 2020年8月12日-2020年9月11日

活动期间,华为云用户通过活动页面购买云服务,或使用上云礼包优惠券在华为云官网新购云服务,累计新购实付付费金额达到一定额度,可兑换相应的实物礼品。活动优惠券可在本活动页面中“上云礼包”等方式获取,在华为云官网直接购买(未使用年中云钜惠活动优惠券)或参与其他活动的订单付费金额不计入统计范围内;

  • What is the NIST CSF?

    The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) is an internationally recognized system for assessing information security. It provides guidance for organizations seeking to enhance cybersecurity.


    NIST CSF consists of standards, guidelines, and best practices to manage cybersecurity. They put forward an Identify, Protect, Detect, Response, Recovery (IPDRR) model, which helps organizations minimize risks before, during, and after a security incident.


    Huawei Cloud has earned the highest level of NIST CSF certification, making Huawei Cloud the first cloud service provider certified with NIST CSF in China. This certifies Huawei Cloud can manage and reduce cyber security risks that may be faced by the cloud platform and can provide you with secure and trusted cloud services worldwide.


    Huawei Cloud periodically reviews its information security management systems based on changing conditions, so Huawei Cloud services will always be protected by industry-leading network risk management capabilities.

  • Which data centers are covered by Huawei Cloud's NIST CSF certification?

    The NIST CSF certification covers over 40 data centers belonging to Huawei Cloud globally, plus operation and maintenance services for them, including the provision of operation and maintenance services for Huawei Cloud data centers based on third-party IDCs, as well as those for Huawei Cloud's self-built data centers. You can download Huawei Cloud's NIST CSF certificate from Compliance Certificates.

  • Which Huawei Cloud services are covered by NIST CSF certification?

    The NIST CSF certification covers over 150 Huawei Cloud services including, but not limited to, Advanced Anti-DDoS (AAD), Web Application Firewall (WAF), Data Encryption Workshop (DEW), and Database Security Service (DBSS). You can download Huawei Cloud's NIST CSF certificate from Compliance Certificates.


    If you would like to learn more about our products, please contact us.

  • How can Huawei Cloud help me align with the NIST CSF?

    Although Huawei Cloud has achieved the NIST CSF certification and provides you with secure and reliable cloud services, using services provided by Huawei Cloud does not ensure your organization's compliance with the NIST CSF requirements. NIST CSF requires us to continuously improve our organization's cyber security risk management system based on standards and best practices referenced in NIST CSF. To get your organization certified, you can invite a third-party independent certifying body to assess your information system.