Benefits of the Cybersecurity Framework

The framework provides a guideline and loose structure for how a cybersecurity infrastructure should be created or maintained. It is beneficial to organizations with or without an existing system. For those with an existing system, they can use the framework to strengthen or find gaps within it. There are different levels and objectives in which an organization can choose from that meets its specific needs, especially regarding the core and tiers. For the framework core, an organization can use it as a template for categories, subcategories, and informative references that. They can also adapt it according to their own tier, depending on how advanced their cybersecurity infrastructure is. Another benefit is that organizations are not stuck within a specific framework, and can change objectives as needed. Roles as well as responsibilities for each role can be defined for the executives, business/process level, and operations. It can also help an organization find their own place within the cybersecurity ecosystem, as they are most of the time not an isolated entity and play a role with other entities. The supply-chain is a great example in showing this. Sending and receiving products is a lengthy and critical step and the framework offers models to prevent threats from affecting the chain.

At my own workplace, I would clearly define each category and the roles of personnel that carry out each task. A clear guide on how the system strives to identify, protect, detect, respond, and recover all data would be made. Another guide would describe the entire supply-chain with possible risks at each level, and how the risks would be handled. I would choose a tier at 2 or above, as being agile and communicative with other sources about risks should be placed on high importance. The framework would aid on my budgeting. By knowing what my biggest objectives are, I would know where to put the most amount of money and staffing on. Lastly, I would use the framework in order to ensure all performance is following government regulations.

Leave a Reply

Your email address will not be published. Required fields are marked *