Cyber Security Framework

What is Cybersecurity Frameworks?

Cyber Security Frameworks is a series of documented, agreed, and understood policies, procedures, and processes that define how information is managed in business, to lower risk and vulnerability, and increase confidence in an ever-connected world.

Why your organization needs cybersecurity framework?

Cybersecurity professionals often face the curse of knowledge—understanding so much about cybersecurity that it is difficult to communicate about it in simple terms to those outside the field. But cybersecurity frameworks can make it easier for everyone in the business to understand, comprehend, and communicate about security.
Cyber Security Frameworks provide recommendations on implementing and managing the various aspects of a security program, such as perimeter defense, access control, authentication, encryption, monitoring, reporting, incident response, and risk management. Cybersecurity professionals may give you advice on best practices and areas that should be covered in cybersecurity awareness training.

What is the focus of the Cybersecurity framework?

The cybersecurity framework focuses on Identity management, data handling, and privacy matters.

What are the top 2 cybersecurity Frameworks?

The top 2 security frameworks that are available to help protect company data are COBIT and NIST.

What is COBIT?

COBIT is a framework for the governance and management of enterprise information and technology, aimed at the whole enterprise.

COBIT stands for Control Objectives for Information Related Technology.

COBIT 2019 is a software developed by ISACA, a global association helping individuals and enterprises achieve the positive potential of technology. ISACA leverages the expertise of its half-million engaged professionals in 188 countries in information and cybersecurity, governance, assurance, risk, and innovations.

How to use COBIT 2019 as a Road Map?

What Are the Drivers?
Where Are We Now?
Where Do We Want to Be?
What Needs to Be Done?
How Do We Get There?
Did We Get There?
How Do We Keep the Momentum Going?

What is NIST?

NIST stands for National Institute of Standards and Technology (NIST), also called NIST Cybersecurity Framework, is a framework for Improving Critical Infrastructure Cybersecurity organizes basic cybersecurity activities at their highest level.

NIST is a physical sciences laboratory and a non-regulatory agency of the United States Department of Commerce. Its mission is to promote innovation and industrial competitiveness.

What are the highest level of functions?

Identify
Protect
Detect
Respond
Recovery

How to choose the right cybersecurity framework?

Secured Transactions Cybersecurity Professionals can help you choose the right framework that fits your organization's needs. Please fill out the simple form, and we will contact you promptly.

About the Author: Jenny Jo

Jenny Jo is the president and co-founder of MJJT Consultants. Ms. Jo is a Software Engineer, a Cyber Security Auditor, and an IT Project Manager. She is also a Certified Informatin Security Manager (CISM) which certifies her to audit information systems, as well as design, build, and magage businesses' information security programs.