U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of€¦

← Back to Blog

U.S and EU Cybersecurity regulations set out requirements for covered organization’s to demonstrate their governance over and management of cybersecurity risks. Cybersecurity risks that change with changes in organizational strategy, operations and financial performance.

Governance over cybersecurity risk is managed through a cybersecurity risk management framework, that requires a cybersecurity standard to be implemented to mitigate cyber risk. A cybersecurity standard defines the practices that enables an organization to reduce inherent risk to a level that an organization can manage, through board oversight and assurance.

Ted Dziekanowski and I believe that the most appropriate approach an organization can adopt to mitigate cyber risk is to implement a Cybersecurity Framework (CSF) Profile. In our paper that can be read here (https://lnkd.in/dTXWbqWr), we discuss the Cybersecurity Framework Profile and requirements for the implementation under a Cybersecurity Risk Management Framework.

Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA

#cyberriskmanagement #cyberregulation #fisma #rmf #cybersecurityframeworkprofiles

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7047110156467224577