Resources:Visit the CIS WebsiteHighlights:The importance of information security governanceSecurity vs. complianceData – determining what you need and where to find itUnderstanding risk from a decision-basisCritical elements to fulfill business requirementsProducing value in a compliance programApplying agility for continuous improvementGood compliance = good securitySecurity is the practice of implementing effective technical controls to protect an organization’s digital assets. Compliance, on the other hand, is the application of that practice to meet regulatory or contractual requirements. Unfortunately, more often than not, organizations focus on compliance once a year when it’s time to certify that their “security is good.” The process of being compliant and secure should be a continuous process.

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related