How should we approach the development of cyber-policy and infrastructure given the \u201cshort arm\u201d of predictive knowledge?<\/strong><\/em><\/p>\n\n\n\nIn the world of cyber-security it is very hard to predict future or potential risks around newer technology. That is why companies must approach they cyber-policy and infrastructure in a way that keeps in mind they cannot get rid of all risks and vulnerabilities within their companies. Trying to predict the future when it comes to risks, is like trying to solve a problem that is not it there, its costly and could potentially be of no value, so little to no cybersecurity budget should be used in the development of these protections, that should be part of research and developments budget. Companies must create a plan to identify and prioritize these risks. The NIST Framework is perfect for itemizing cybersecurity risks and threats and allows companies to prioritize where to allocate funds for the most dangerous risks and to work from there. This is also very relatable to cheating in video games, its hard to predict how people will bypass anti-cheat or break the game.<\/p>\n\n\n\n
From your readings of pages 1 – 21 of the NIST Cybersecurity Framework, what benefit can organizations gain from using this framework, and how would you use it at your future workplace?<\/strong><\/em><\/p>\n\n\n\n<\/p>\n\n\n\n
I think the most beneficial aspect of the NIST Framework is how it gives companies a straightforward plan for the security they want and need, through the Target and Current Profiles. Once the company chooses a target profile and the current profile is evaluated they are left with the gap analysis, which is essentially a to-do list for the company. This gives the company a goal and an idea of what they need to do. I would use this Framework to the fullest. One thing I really liked in this document is the communication aspect and having guidelines with the Target Profile for smoother and quicker communication within the company and with its stakeholders. An example from the framework shows this, If another company is doing business with another, and there are potential risks, company 1 could use its current profile to show their requirement and cybersecurity needs. Another system I would implement would be the Tiers system, for the simplicity of understanding the vulnerabilities and evaluating current responses to threats. <\/p>\n\n\n\n
\n","protected":false},"excerpt":{"rendered":"Cybersecurity, Technology, and Society Students in IT\/CYSE 200T will explore how technology is related to cybersecurity from an interdisciplinary orientation. Attention is given to the way that technologically-driven cybersecurity issues are connected to cultural, political, legal, ethical, and business domains. The learning outcomes for this course are as follows: Course Material The Human Factor – Training vs … Continue reading IT\/CYSE 200T<\/span><\/a><\/p>\n","protected":false},"author":26158,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/pages\/133"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/users\/26158"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/comments?post=133"}],"version-history":[{"count":5,"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/pages\/133\/revisions"}],"predecessor-version":[{"id":313,"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/pages\/133\/revisions\/313"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/carterallgeier\/wp-json\/wp\/v2\/media?parent=133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}