Answered: Explain security frameworks ISO, NIST,…

Computer Networking: A Top-Down Approach (7th Edition)

7th Edition

ISBN:9780133594140

Author:James Kurose, Keith Ross

Publisher:James Kurose, Keith Ross

Chapter1: Computer Networks And The Internet

Section: Chapter Questions

Problem R1RQ: What is the difference between a host and an end system? List several different types of end...

See similar textbooks

Related questions

Question

Explain security frameworks ISO, NIST, COBIT How are they predominately used? What are their strengths? What are their weaknesses? Are they general or specific? What is a setting (small business, school, home office, etc.) that you would recommend for each of these?

Expert Solution

Step 1

Answer:

security frameworks

The Process includes a shared vocabulary and a structured risk assessment approach. The Center requires tasks that must be included in a cybersecurity program designed to accommodate the needs of any company. This system is intended to support the cybersecurity program and risk management processes of an enterprise, not to replace them.

The framework profile development process helps enterprises to define areas for improving current procedures or introducing new processes. When contrasted with the easy-to-understand vocabulary of the System, these profiles make for stronger collaboration within the organization.
The combination of a System Profile and Development plan helps an organization to completely leverage the framework by allowing a cost-effective goal setting and coordination with corporate members of improvements initiatives, or by setting goals with suppliers and partners. Profiles and related deployment plans c In addition,
The Framework's implementation levels portion will support organizations by contextualizing how a company views cybersecurity risk management. Tiers lead organizations to consider their cybersecurity program's acceptable level of rigor. Tiers should be used to communicate about task priority, the risk appetite, and the budget as a medium for coordination.