Introduction
Picking the right security framework
()
Who uses security frameworks?
()
Why are security frameworks important?
()
Definitions
()
1. Frameworks, Regulations, and Risk
Overview of the major frameworks
()
Other frameworks to consider
()
Cybersecurity regulations
()
Risk assessment and the SIG
()
2. Additional Considerations
PCI and credit card payments
()
CIS critical security controls
()
NIST 800-53: Guidance for US companies
()
ISO 27001: A global approach with certification
()
3. Framework Comparison
How the frameworks compare
()
Mapping process controls
()
Mapping technical controls
()
Deciding on a framework
()
4. The Core Security Set
The control families
()
The measures
()
The assurances
()
Augmenting frameworks with GRCs
()
Developing a security mindset
()