cognitive cybersecurity intelligence

News and Analysis

Search

Cybersecurity Standards vs Procedures vs Controls vs Policies

Cybersecurity is a complex field with many specialised terms. Four key terms are Policies, Procedures, Standards, Guidelines, and Controls. Policies are broad, high-level management decisions, standards define how to achieve those policies, controls are specific cases and directives to implement a standard, while procedures are the specific steps needed to implement a control. NIST and ISO are two agencies that define cybersecurity standards. These terminologies form the foundational architecture of a company’s cybersecurity protocol.

Source: securityboulevard.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts