How to Make Sense of Cybersecurity Frameworks

Explore a comprehensive model for organizing and simplifying cybersecurity frameworks in this 40-minute conference talk from the RSA Conference. Learn how to effectively implement and communicate common frameworks to build a more robust security program. Gain insights from Frank Kim, a senior instructor at SANS Institute and experienced CISO, as he shares his expertise on integrating various security frameworks. Discover how to organize different types of frameworks, use them in conjunction, and effectively communicate results to drive program execution. Ideal for security leaders with experience in building and leading security programs, this talk covers control frameworks like NIST SP 853 and CIS Controls, program frameworks such as ISO 27000 and NIST CSF, and risk frameworks including NIST Risk Standards and the FAIR Model. Acquire valuable knowledge on framework mapping, risk management, and the Intrusion Kill Chain to enhance your cybersecurity strategy.