A great read from the Australian Signals Directorate, as they update their cyber manual, getting behind the core principles of the NIST RMF and CSF.

← Back to Blog

A great read from the Australian Signals Directorate, as they update their cyber manual, getting behind the core principles of the NIST RMF and CSF. The Information Security Manual is a comprehensive read outlining a risk based approach, covering Governance, Identify, Detect, Protect, Respond and Recover of cybersecurity/ information security practices.@Thaddeus Dziekanowski, the NSD manual is aligned to NIST SP 800-37 Rev 2, following the Risk management life cycle; organisational design; framing of risk within senior management and leadership teams; and the role of the CISO in affecting change within the organisation.This is a comprehensive update. It aligns to other regulations such as US FISMA whose foundation is NIST SP 800-37, and uses NIST CSF, NIST SP 800-%£ and a range of other NIST organisational design standards to create an enterprise wide risk management approach to the management of information risk.https://lnkd.in/dVdM3ZRqBrian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7312372467488940034