Caleb Sima: Building a Security Framework: An Enterprise-Wide Endeavor
Building a security framework must be a collaborative, organization-wide initiative, demonstrating how each person can do their part to ensure better security. A security framework also demonstrates due diligence and limits liability by making the regulatory process...
Alex Wood: Mapping Risk Directly to Framework Controls
A security framework provides a way to qualitatively and quantitatively talk about security, whether it relates to practices, budget discussions, or regulatory issues. With a security framework, it becomes possible to map specific IT risks to specific framework...
Russ Kirby: Adapt the Framework to the Business, not the Business to the Framework
Choosing a framework often means borrowing from different standards and adapting those to an operational framework designed to serve your business objectives. Adopting a framework that suits your business gives you visibility that enables you to anticipate what will...
Kalpesh Doshi: A Framework Is a Foundation
When you adopt a framework, you’re walking a road that many have walked before you, and they have all shared their experience. Frameworks help clients interpret the results of third-party assessments. If an assessment finds a compliance deviation, the client can...
Ole Frandsen: A Framework Enables a Consistent Security Practice in an Extended Global Enterprise
Without a framework, you have no basis for establishing controls in a consistent way across an extended enterprise. Having a maturity measurement makes it easier to determine where you are in relation to client requirements, and what you must invest to support a...
Javed Ikbal: Use a Framework to Map Client Requirements to Your Security Practices
Adopting a recognized security framework that has been tested and vetted enables a security posture that translates directly to client requirements. A framework serves as a basis for quickly complying with new regulatory requirements without having to start from...
Eric Bedell: The Framework Provides a Common Language for a Global Company
One example of how a framework based on the ISO standard must be modified to meet local compliance requirements is European operations needing to comply with GDPR. When implementing a framework, begin by focusing on goals and data that are most important, deliver on...
Gary Hayslip: Frameworks Provide an Excellent Way to Understanding Risk
Frameworks provide a central gathering point for important questions about the business that must be answered before moving forward. Adherence to a framework helps everyone in the organization see why their part is critical and that the actions they must take are not...
Daniel Cisowski: Even for Sophisticated Companies, Frameworks Help With Navigation and Priority Setting
Mature companies tend to know what they need to do, but frameworks add an element of standardization and discipline that helps bring order and reproducibility to security processes. Choosing an appropriate framework requires experience and familiarity combined with a...
Carlos Lerma: Frameworks Strengthen a Collaborative Security Process
Adopting a security framework and roadmap helps manage the growing security challenges that come from having an increasingly complex infrastructure. The adoption of a framework and a roadmap strengthens a collaborative security process in which business and IT...
