APPENDIX A

Information on Cybersecurity Controls

There is much information on the controls that can be used to treat cybersecurity issues. In this Appendix, I have tried to limit it to three significant sources of advice:

  • Critical Security Controls Version 5.0
  • International Standards Organization (ISO)/ International Electrotechnical Commission (IEC) 27001 Controls
  • National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 4 Controls

Critical Security Controls Version 5.0

A number of organizations have published a list of the 20 most critical security controls. This is based upon The Council on Cyber Security Critical Security Controls Version 5.0.

While this is not a comprehensive list, it does provide a good ...

Get Business Continuity in a Cyber World now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.