INFOSEC Governance and Regulation – Page 4

SIEM Use cases

How To Build SIEM Use Cases Comprehend your needs, risks, and establish alerts for monitoring all necessary systems accordingly. Determine the priority and impact, then map the alert to the…

Bharath Narayanasamy

NIST DETECT

NIST – DETECT: Categories and Subcategories

Bharath Narayanasamy

NIST IDENTIFY

NIST – IDENTIFY: Categories and Subcategories

Asset Management (ID.AM): The data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to business objectives…

Bharath Narayanasamy

NIST

NIST Cybersecurity Framework v1.1: Fundamentals

NIST Functions Identify – Understand what you have and includes activities such as asset management, governance, risk assessment. Protect – Build safeguards and controls to protect what is important to…

Bharath Narayanasamy

BLUE TEAM Risk Management INFOSEC Governance and Regulation

Risk Assessment Methodologies

Risk Management Frameworks There are several frameworks for risk assessment. Example methodologies are: NIST SP 800-30: A risk assessment methodology developed by the National Institute of Standards and Technology (NIST).…

Bharath Narayanasamy

BLUE TEAM Risk Management

Risk Management – Terminology

Risk Avoidance Risk Acceptance Risk Reduction Basic Terminology Threat: an intentional or accidental event that can compromise the security of an information system. Examples include hacking, phishing attacks, human error,…

Bharath Narayanasamy