Curtis Letson: Security Frameworks Provide a Common Language
A security framework provides a common frame of reference that is valuable for conversations with leadership as well as potential clients. A business can leverage a security framework to understand its current environment and continually enhance its own security...
Floyd Fernandes: Security Frameworks Must Serve Business Objectives
One of the greatest values of a security framework is it helps to more strategically bridge the difference between security requirements and business needs. A third party may implement a framework more quickly, but you understand your business best. That’s the key to...
Scott Estes: A Security Framework Makes the Business Viable
The need for an organized approach to developing and maintaining a security posture is essential for any business. Mapping security practices to framework controls makes your depth of operations, from the back office to the middle office to the front office, run more...
Tero Lampiluoto: A Framework Can Streamline Vendor Onboarding
One of the most important benefits for his operation is not having to constantly reinvent the wheel as he adapts the business’ security practices to changing operations and different regions. Frameworks give you flexibility to adapt the practices to your own needs,...
Paul Heffernan: Framework Benefits Tie Back to Reasons for Framework Adoption
The framework enables you to know what your partners and suppliers are doing in their security practice, and it makes it easier for suppliers to comply with your requirements. If it is taken seriously in the organization and given the proper resources, a security...
Nir Yizhak: Framework as an Instrument of Change
It’s not just the business that benefits from adopting a security framework. Customers benefit too, because the framework helps them meet their own legal and risk management obligations. With security embedded into many aspects of the business, a framework can...
Lee Eason: Frameworks Guide Both Product Development and Customer Engagement
As more security controls are managed at the app level, developers take on primary responsibility for creating processes that manage those controls. The development playbook, based on standards frameworks, presents security standards in a language developers...
Lee Bailey: A Framework Can Align Security Objectives with Business Goals
Implementing a framework forces you to make decisions about what your greatest risks are and what you need to protect most. Embedding security into business operations enables you to align security benefits with business benefits. "The framework helps drive alignment...
Lester Godsey: A Framework Provides a Baseline for Security that Supports Business Goals
Most businesses use the framework as a guideline to decide which controls and practices are most important to their business. The security metrics you measure and that map to framework controls are really driven by top-down business considerations. “If management...
Alex Wood: Mapping Risk Directly to Framework Controls
A security framework provides a way to qualitatively and quantitatively talk about security, whether it relates to practices, budget discussions, or regulatory issues. With a security framework, it becomes possible to map specific IT risks to specific framework...
