NEW BOT Телеграм, страница

دوازده پروسه مدیریتی امنیت سایبری
@roozbeh_learning👈🏼

365 viewsedited 17:45

دوازده پروسه مدیریتی امنیت سایبری @roozbeh_learning👈🏼

دوازده پروسه مهم مدیریتی امنیت سایبری
12 Essential CyberSecurity Program Management Processes

Governance:حکمرانی

During this process the security program is aligned with organizational goals and objectives by the leaders that are responsible for assets like information and resources like people.

Risk Management:
مدیریت ریسک

During this process the security program threats and vulnerabilities are balanced against existing controls and decisions are made to add or remove risk mitigation controls based on the importance of assets.

Compliance Management:
مدیریت تطابق با استاندارد ها و رگولاتوری ها
During this process the security program identifies legal obligations defined in statutes, regulations, contract sand maps them to the master control deck providing real-time, continuous evidence.

Vulnerability Management:
مدیریت آسیب پذیری
During this process the security program identifies and mitigates known vulnerabilities. In addition, the VM process also examines Enterprise Architecture for unknown vulnerabilities and treats those vulnerabilities.

Communication Management:
مدیریت ارتباطات
During this process the security program identifies opportunities to share security related information by creating appropriate communication pieces and carefully selecting and leveraging channels.

Awareness Training:
آگاهی بخشی و آموزش

During this process we share tools and techniques used to apply security to daily roles and responsibilities within the organization raising awareness and influencing employees to become more security consciousness.

Access and Identity:
کنترل هویت و دسترسی
During this process the security program ensures that persons accessing the organizations information and systems can be positively identified and that they have access to the information and resources required to fulfill their roles and responsibilities.

Asset Management:
مدیریت دارایی ها
During this process the security program ensures that assets are identified and registered so that risk management, vulnerability management, change management, configuration management and availability management can be effective.

Document Control:
کنترل مستندات
During this process the security program identifies and controls documentation that is crucial to produce consistent and reproducible results.

Records Management:
مدیریت رخدادها و شواهد
During this process the security program identifies records that are crucial to produce evidence of conformity with standards and compliance with legal obligations.

Internal /External Auditing:

ممیزی های داخلی و خارجی
During this process the security program provides assurance by verifying and validating that the security program is operating effectively and makes recommendations where appropriate and necessary for the continuous improvement of the program.

Monitoring and Reporting:
پایش و گزارش دهی
During this process the security program identifies security events and incidents for follow up action . These events can range from systems faulting to attempts to access unauthorized information or system resources potentially leading to a breach
https://lnkd.in/dFzWE-E
@roozbeh_learning👈🏼

412 viewsedited 17:50