Leveraging existing frameworks instead of building from scratch
When initiating the development of your information security program, it is recommended not to start from scratch. Numerous well-established frameworks are available that can serve as a solid foundation for your information security program. Widely accepted standards include the following:
- NIST Cybersecurity Framework: The NIST Cybersecurity Framework is a comprehensive set of guidelines for organizations to manage and reduce cybersecurity risks. It includes a framework for managing cybersecurity risk and standards, guidelines, and best practices for cybersecurity management.
- ISO 27000-series: This series encompasses several standards and frameworks for information security management, of which ISO 27001 is perhaps the most recognized. It provides a systematic approach to managing and protecting sensitive information using a risk management process. Other standards in the series, such as ISO 27017 - Cloud...
