# data[].attributes.body
COBIT5

# data[].attributes.body
CIS team

# data[].attributes.body
CIS V7

# data[].attributes.body
Tim
Dalet
Rahul

NIST CSF

According to NIST (2014), "NIST CSF is a set of industry standards and best practices".  The framework of NIST CSF clearly indicates that organizations planning to implement it can use thei…
Go to this Sway

# data[].attributes.body
Shankar Shyam Elizabath

# data[].attributes.body
IASME Governance
(Akhitha, Remith, Austin)

# data[].attributes.body
NIST 800-53
Navneet, Roshan and Harsh

# data[].attributes.body
- Complete risk assessments for executive review, operational process and third-party vendors

- Review security best practices and validate your organization’s adoption or reasoning for not adopting

- Audit your data and review your data stewardship practices including data lifecycle management

- Complete a review of insurance needs including exclusions and pre-approval of coverage for any third-party services (such as cyber forensics, remediation provider, PR firm, etc.)
- Establish and regularly test an end-to-end incident response plan including empowering 24/7 first-responders

- Establish/confirm relationships with data protection authorities, law enforcement and incident service providers

- Review and establish forensic capabilities, procedures and resources (internal and third-party providers)

- Develop communication strategies and tactics tailored by audience (e.g., messages to employees vs messaging to media vs notifications to customers)

- Review remediation programs, alternatives and service providers
- Implement ongoing employee training for incident response

- Establish employee data security awareness and ongoing education on privacy, incident avoidance (password practices, how to recognize social engineering, etc.) and incident response

- Establish employee data security awareness and ongoing education on privacy, incident avoidance (password practices, how to recognize social engineering, etc.) and incident response