Introduction to Key Frameworks

This book introduces two internationally recognized bodies of knowledge: COBIT 5 from a cybersecurity perspective and the NIST Framework for Improving Critical Infrastructure Cybersecurity (CSF).

Focus on Governance, Risk Management, and Audit

Emphasizing the processes directly related to governance, risk management, and audit, the book maps the CSF steps and activities to the methods defined in COBIT 5, extending the CSF objectives with practical and measurable activities that leverage operational risk understanding in a business context.

Benefits for ICT Organizations

This allows the ICT organization to convert high-level enterprise goals into manageable, specific goals rather than unintegrated checklist models.