Security Control Frameworks

Actions for Security Control FrameworksMust post first.

IT controls come in a vareity of “flavors”. Some groups are described as People, Process, and Technology. Othe controls (safeguards) are defined by the standard with which they apply (e.g, Prevent, Detect, Deter, Respond). Research and select a control grouping framework then populate the framework with some examples of the actual control. Provide your rational as to why you selected your framework and what industry verticle your think it is most appropriate. 

Controlling the Uncontrollable

Actions for Controlling the Uncontrollable

Must post first.

What four (4) IT security controlls do you find the most important? Why? Do you consider anything related to process or policy a “true” safeguard? Why? Why not? 

Controlling the Insider Threat

Actions for Controlling the Insider Threat

Must post first.

We know from experience that the insider threat presents the biggest challenge to security professionals. With this area of control being nearly overwhelming… what technologies do you recommend that will help the security team keep a near real-time view of the insider threat? Think automation, behavior detection, and correlation.