Assessment Description
Frameworks were briefly introduced in Topic 1, and HIPAA and PCI were mapped to the NIST 800-53 set of security controls. NIST is only one of many available frameworks companies can use to establish and manage their IT and security programs while meeting industry standards, regulations, compliance, and laws.
This assignment will continue evaluating frameworks and their applicability.
Create a digital slide presentation with 10-15 slides that provides a comparison of five major frameworks. For each framework, identify the similarities and differences in a matrix fashion.
Potential frameworks include NIST Cybersecurity Framework, ISO/IEC 27001, Factor Analysis of Information Risk (FAIR), CIS Controls, Threat Agent Risk Assessment (TARA), PCI DSS, HIPAA Security Rule, SANS Critical Security Controls, Committee of Sponsoring Organizations of the Treadway Commission (COSO), Control Objectives for Information and Related Technologies (COBIT), or Operationally Critical Threat Asset and Vulnerability Evaluation (OCTAVE).
Note: Prince2, PMBOK, OPM3, Six Sigma, and other project management-based models do not apply to this assignment.
Also, address the following in your presentation:
Explain the primary steps of “Access Control Process” for organizations to maintain the confidentiality, integrity, and availability of that information.
Select an appropriate framework to manage network and communication infrastructure based on corporate requirements and culture.
Identify the characteristics and application of frameworks to achieve a high security posture for enterprise infrastructure.
Explain each framework (purpose) and how they can be applied to your company.
Identify the advantages and disadvantages of each security framework.
Frameworks guide to ensure information privacy and security. While privacy focuses on an individual’s right, security refers to an organization’s responsibility. Provide an ethical standpoint in which you would choose privacy over security and discuss it from the Christian worldview perspective.
Describe the industry or organization best suited to each framework (i.e., hospital, banking, manufacturing, retail) and include examples.
Finally, briefly answer the questions below to explain the differences between the five frameworks selected and Access Control Models presented:
What is the difference between an Access Control Model and Security Framework?
Can Access Control Models and Frameworks be combined?
How does a Framework impact an information system?
How does an Access Control Model impact an information system?
While APA style is not required for the body of this assignment, solid academic writing is expected, and documentation of sources should be presented using APA formatting guidelines.
