January 2021
Beginner
565 pages
19h 27m
English
Compliance gap analyses and security risk assessments will find gaps, risks, threats, and vulnerabilities. These findings will be given a risk impact rating and priority for mitigation. Some risks will be accepted, transferred, or mitigated. Deciding which security controls to implement and when is an important part of planning. You may need more than one fiscal year to address complete remediation and risk mitigation.
Implementing security controls requires a gap remediation project plan and schedule. Gap remediation typically follows a priority of risks and threats that need to be fixed first. Anything that pertains to humans and sensitive data typically rises to the top. This is shown in FIGURE 14-11 ...
Read now
Unlock full access