Get an introduction to multiple security frameworks and learn how to bring standardization and consistency to your security practices.
Overview
Syllabus
Introduction
- Security frameworks
- Who uses security frameworks?
- Why are security frameworks important?
- Definitions
- Major security frameworks
- Domain-specific frameworks and guidance
- Maturity frameworks
- Privacy frameworks
- Regulatory frameworks
- Risk assessment
- PCI DSS and credit card payments
- CIS security controls
- NIST 800-53: Guidance for (US) companies
- ISO 27001/2: A global approach with certification
- How the frameworks compare
- Mapping the controls to one another
- Resources available for mapping controls
- Choosing a framework that is relevant to your business
- Understanding control families and domains
- The measures
- The assurances
- Enabling technologies
- Security mindset
- How to get started
Taught by
Mandy Huth
