CyberSecurity Foundation

#text-block-10 { margin-bottom:0px; text-align:left; }

Preliminary CyberSecurity Framework–Identify: Develop the organization’s knowledge of CyberSecurity to enable and empower management to address risk to organizational assets, people, information, software, hardware, telecommunications, and facilities. Key processes include:

* Business Environment
* Risk Management Strategy
* Governance
* Risk Assessment
* Asset Management

Preliminary CyberSecurity Framework–Protect: Design, test, and deploy appropriate safeguards that mitigate CyberSecurity threats to the organizations’ operations and services. Key processes include:

* Data Security
* Protective Technology
* Information Protection Processes and Procedures
* Access Control
* Awareness Training
* Maintenance

#text-block-11 { margin-bottom:0px; text-align:left; }

Preliminary CyberSecurity Framework–Detect: Design and implement effective tools that will actively monitor the organizations’ operations and services to identify events before they develop into a security incident. Key processes include:

* Anomalies and Events
* Security Continuous Monitoring
* Detection Processes

Preliminary CyberSecurity Framework–Respond: Plan, test, and operationalize CyberSecurity event and incident management processes. Train security teams to effectively engage CyberSecurity threats and test the organization’s response to events and incidents. Key processes include:

* Response Planning
* Communications
* Analysis
* Mitigation
* Improvements

Preliminary CyberSecurity Framework–Recover: Plan, test, and deploy recovery processes that will quickly return the organization to full operational capacity. Train employees designated to participate in the recovery team ensuring a smooth seamless transition from Cyber Security incidents to full operational capacity. Key processes include:

* Recovery Planning
* Improvements
* Communications