Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_20

20. Risk Management Frameworks

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

Compliance frameworks provide the link between regulatory mandates and the business practices required to support them. Frameworks provide a model and structure that organizes and categorizes risk and associated internal controls to help organizations monitor and measure the effectiveness of their activities and investments. This goal is typically achieved through a set of control objectives outlined in the framework, which allows the organization to assess the security posture and set goals to improve ...