Call us now:
It is positive to see NIST releasing their latest update draft to NIST CSF 2 – (https://lnkd.in/ehGBA6fr). Bringing further clarity to organizational context, roles and responsibilities, risk management and supply chain security within corporate governance. Especially the importance of business and mission objectives in the continual evolution of cybersecurity risk management.
It would be great to see the framework develop along the lines of the 3 LoD. With the role of internal and external audit integrated within the governance function, to assure the oversight of cybersecurity risk management required by cybersecurity risk management regulation and required guidance for board cyber risk regulatory compliance.
To meet regulatory requirement set out by the U.S and EU companies will have to implement a cybersecurity risk management framework and cybersecurity framework. The most effective solution to do this is through a CSF profile. A CSF profile acts as a vessel into which NIST CSF, 27001, cloud security alliance or other controls sit. We discuss this approach in our enclosed paper.
Ted Dziekanowski Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA Shawna Flanders CRISC, CISA, CISM, SSGB, SSBB
#cybersecurity #cyberriskmanagement #cyberlaw #csfprofile
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7056914971804225538