December 2020
Intermediate to advanced
361 pages
6h 26m
English
Most organisations already have some cyber security measures in place – these may not be sufficient or as effective as they should be, but the point is that you are almost certainly not starting from scratch. It is therefore important to understand how far your current practices are from where you want to be.
Before you can do that, you have to define both your current and ideal target states in a way that they can easily be compared against one another. The CRF can make this task easier.
The most pertinent parts of the CRF for this process are the comprehensive selection of processes (discussed in detail in part 3 of this book) and the different levels of maturity (see ...