Topic: Information Security Archives

There is no CSF certification audit. What an internal NIST CSF audit checklist is for, the six fields…

CSF 2.0 has no maturity model. Here is a defensible 5-point scale for scoring all 106 outcomes, why…

What NIST CSF policy templates must cover across the six Functions, the documents most programmes are missing, and…

NIST maps all 106 CSF 2.0 outcomes to SP 800-53 Rev 5 with 740 control references. How to…

CSF 2.0 withdrew 79 Subcategories and removed 12 Categories. The full mapping, the 16 outcomes with no predecessor,…

The GOVERN function is 31 of the 106 CSF 2.0 outcomes across six Categories, ten of them supply…

The 4 NIST CSF Tiers explained, including the two axes CSWP 29 scores them on and why Tier…

ISO 27001 vs TISAX compared for automotive suppliers: certificate versus ENX label, maturity level 3 scoring, AL2 vs…

The FTC Safeguards Rule covers 13 types of non-bank financial institution, not just banks. Here is the two-part…

A user access review is the control auditors test hardest. Here is the seven-step process, the ISO 27001…

A WISP for sole practitioners is smaller, but not for the reason most assume. What 16 CFR 314.6…

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

Tag: Topic: Information Security