Cybersecurity Frameworks

Question 1

Cybersecurity Framework

Answer 1

Way to measure your progress on the framework to figure out the maturity level for the risk. Your organization should be using a certain framework.
-NIST-CSF
-CSA – CAIQ (for cloud)
-ISO 27001 Cyber Framework
-NIST 800-53
-NYDFS
-Others (CIS, FISMA, ASD,
COBIT, COSO, TCSC, etc.)

Question 2

NIST-CSF

Answer 2

Generally commercial space

Question 3

NIST 800-53

Answer 3

Mostly government, very controlling and detailed

Question 4

NYDFS

Answer 4

Insurance or financial space, subject to this if doing business in New York

Question 5

Internal standards do not equal external standards

Answer 5

It isn’t “fair”