BLUF: Based on my experience, I personally recommend that the new Cybersecurity Department be placed under the Information Technology department. Integration Pros: Cons: Efficiency Pros: Cons Relation to Business Needs Pros: Cons Conclusion While inserting the Cybersecurity Department within one of the other departments may work, placing it within the IT Department is the most well-rounded…
Synopsis: NIST Cybersecurity Framework 1.1 vs. 2.0
The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) is a widely used tool for managing cybersecurity risk. Version 1.1 was released in 2018, and version 2.0 (published in February 2024) reflects the evolving threat landscape, regulatory expectations, and the need for broader adoption beyond critical infrastructure. Scope Structure and Functions Governance and Risk Management Supply Chain and Third-Party…