Security Control Frameworks

Question 1

COBIT 5 principles

Answer 1

1. Meeting stakeholder needs
2. Covering enterprise end to end
3. Applying a single, integrated framework
4. Enabling a holistic approach
5. Separating governance from management

Question 2

Open Source Security Testing Methodology Manual (OSSTMM)

Answer 2

Peer reviewed guide for testing + analysis of security infrastructure

Question 3

ISO/IEC 27002

Answer 3

International standard, basis of implementing organizational security + related management practices

Question 4

ITIL - Information Technology Infrastructure Library

Answer 4

Set of recommended best practices for core IT security + operational processes; starting point for crafting customized IT security solution