Security News > 2021 > February > Can your organization obtain reasonable cybersecurity? Yes, and here's how
Cybersecurity expectations are vague, and that has to change if there is any chance of approaching a reasonable amount of cybersecurity.
A good first step, they said, is to use the Center for Internet Security's Critical Security Controls as the authoritative source.
The Center for Internet Security's Critical Security Controls is a recommended set of actions for cyber defense that provide specific ways to stop attacks.
A recognized methodology and approach to demonstrate and provide a reasonable and defensible security posture.
Using the Center for Internet Security's Critical Security Controls also helps simplify the selection of a risk framework needed to assess the company's IT environment, determine gaps, and propose solutions.
Cyber-Security Framework: A set of standards, guidelines, and best practices to help organizations manage and reduce their cybersecurity risks in a way that complements existing cybersecurity and risk-management processes.