Risk Management Frameworks
Morey J. Haber, Brad Hibbert · Apress eBooks · 2018
Compliance frameworks provide the link between regulatory mandates and the business practices required to support them. Frameworks provide a model and structure that organizes and categorizes risk and associated internal controls to help organizations monitor and measure the effectiveness of their activities and investments. This goal is typically achieved through a set of control objectives outlined in the framework, which allows the organization to assess the security posture and set goals to improve procedures to protect systems and data. Another significant benefit of leveraging a compliance framework is that it can help an organization prioritize and coordinate activities, not only for a single regulatory mandate but across multiple compliance mandates as well.