December 2020
Intermediate to advanced
361 pages
6h 26m
English
book
The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks
by Alan Calder
Content preview from The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
CHAPTER 15: GOVERN AND ASSURE
Validate your security efforts, make corrections and improvements where possible, and ensure ongoing board-level oversight of and commitment to cyber security.
The final CRF control category, ‘govern and assure’, comprises activities that ensure and demonstrate an ongoing and organisation-wide commitment to security. Governance is about ensuring the project is suitably overseen, and assurance is about providing evidence to the oversight authority (both internal and external, where necessary) so they can make sensible, reasoned decisions about it. More concretely, that might mean making your chosen cyber security processes part of a larger structure, with clear governance lines (see 15.4) and visible board-level ...