How to Make an Efficient Incident Response Plan
January 12, 2021
Sababa Security has evaluated security for Milan Internet eXchange
January 26, 2021
Cybersecurity is complex, as it requires multiple technologies at different levels of the corporate and industrial infrastructures. It makes CISOs deep dive to understand the strong and weak areas of their environments to efficiently govern and navigate the security roadmap according to the business objectives. From the practical perspective, they need to know the areas that require attention to substantiate their cybersecurity budget investments. This is where security assessment can help.
What is security assessment?
The cybersecurity assessent is a standardized procedure, that aims checking the network security health status. The NIST Cybersecurity Framework is based on the cyber security life cycle management process and is one of the most popular standards to assess IT networks. They often use the NERC guidelines, when it comes to security evaluation for OT environments and critical infrastructures.
The assessment process involves the application of the NIST framework within the customer context. It helps to identify, analyze and prioritize the existing security gaps. Additionally, security risks common for the vertical are also taken into concideration. For example, financial transaction protection is vital for banks, while safety of people and environment is critical for industrial facilities.
Security assessment includes several stages
- Live interviews with the representatives of different teams and departments
- Audit of the formalized policies and controls
- Definition of the current security profile against the desired security maturity model
- Security risk and gap analysis, followed by the risk prioritization
- Definition of the target profile and creation of the roadmap, based on the practical findings
This short activity brings transparency into the company’s cybersecurity and allows implementation of the consistent multi-step security strategy, based on facts and priorities. Watch the webinar to learn more about the security assessment, where will explain the process in detail and share some useful tips.
Image by Beens_Photography
