NIST Cybersecurity Framework Process Risk Analysis Part 2 April 2017

1

Click here to load reader

Transcript of NIST Cybersecurity Framework Process Risk Analysis Part 2 April 2017

Page 1: NIST Cybersecurity Framework Process Risk Analysis Part 2 April 2017

NIST CSF Recovery (RC) Analysis

*** THIS DOCUMENT HAS BEEN CLASSIFIED FOR PUBLIC ACCESS BY SECURE KNOWLEDGE MANAGEMENT INC. ***

32

55

76

6

Control Points (CP) are designed to address known risks, every standard was created using CPs. ISO 22301 BCP has 32 CPs, ITIL has 76 CPs for Recovery, ISO 27001 has 55 CPs for Recovery

NIST Cybersecurity Framework has only “6” CPsWhich Framework Standard would you trust?