Cybersecurity Frameworks to Consider for Organization-wide Integration
- Date: 09 November, 2016
Abstract
Organizations are inevitably facing cybercrime and attacks that can be catastrophic. Guidelines and best practices are key elements in preparing an entire company to be cyber ready. Cybersecurity frameworks exist to provide some guidelines for managing cyber risk. Gain a general overview, and receive tips for implementing an action plan with this white paper. Dig a little deeper and decide which one your organization should explore and adopt to help better prepare for cybersecurity disasters.
Sample
Implementation Action Plan
The most difficult part of integrating a cybersecurity framework into your organization is starting the research. There is no shortcut or substitute for doing your own homework. I recommend designating at least a few hours per framework to read the framework documents themselves as well as look at reviews and evaluations of them. Be sure to seek out both those with positive and negative experiences. Just because a framework sounds good to you, does not mean that it will be a perfect fit for your organization. There are often elements and aspects you did not notice in your initial review. Learn from the concerns of others, and then review the framework documentation a second time.
Unless you are in an industry that has mandatory frameworks that you must stay in compliance with, most cybersecurity frameworks are voluntary. Which also means you can select to integrate some elements from one framework and include other pieces from another security system. The goal is to improve your organization’s security infrastructure, not to rigidly apply a system that was not designed with your company specifically in mind.
