Compliance is a crucial part of any framework or security system, but just as important as having the compliance piece the policies set in place need to be followed or it will certainly breakdown which can lead to unwanted breaches. I believe the basic requirement to design a compliance framework is to obtain very clear stated policies ,standards, laws, and regulations. Usually compliance is always changing as the landscape in technology is always changing as well. The changing rules and regulations makes the job more challenging for any company or organization to maintain a well implemented compliance framework. Another challenge is the continuous expansion and extension of production environments.A well-designed cybersecurity policy dictates which systems should be in place to guard critical data against attacks. It describes the concerned authorities how they will protect the company’s data and who will be responsible. The framework should include information on controls such as what type of security program is to be implemented as well as the management and implementation of updated and patches will certainly be beneficial, as well as backing up data. A big component of this needs to include constant employee training and awareness as well. Overall security policy does not specify a technological solution. It specifies sets of intentions and conditions which helps to protect assets that align with the business. Security policy design is not only the responsibility of IT team but is a responsibility of every one involved.
References
Compliance Forge. (2019). NIST cybersecurity framework. Retrieved from https://www.complianceforge.com/reasons-to-buy/nist-cyber-security-framework-csf.html
Granneman Joshua. (2019). Top 7 IT security frameworks and standards explained. Retrieved from https://searchsecurity.techtarget.com/tip/IT-security-frameworks-and-standards-Choosing-the-right-one
luckyqloo
W8D1JP.docx
0
