Skip to content

Cybersecurity

What is Cybersecurity?

The practice of protecting systems, networks, and programs from digital attacks that aim to access, change, or destroy sensitive information.

Information Security

Each of these is named in at least one of the same controls as cybersecurity. The number is how many controls name both.

What the standards actually require on cybersecurity

Requirements naming cybersecurity across 6 standards, quoted from the control text.

Senior management sponsors the development, maintenance and enforcement of cybersecurity policies, visibly endorsing them.

australian-energy-sector-cyber-security-framework-aescsf::PROGRAM-2d · PROGRAM-2d: Senior sponsorship of cybersecurity policies →
ISO/SAE 2143479 controls

A management system for cybersecurity in production should be instituted to support the production activities of clause 12, for example IEC 62443-2-1.

iso-sae-21434::RC-05-13 · [RC-05-13] Production cybersecurity management system →
Saudi NCA ECC68 controls

The cybersecurity department periodically reviews how the entity implements the cybersecurity controls.

saudi-nca-ecc::1-8-1 · 1-8-1 Periodic review of control implementation by the cybersecurity department →

The organizational mission is understood and informs cybersecurity risk management

NIST-CSF-GV.OC-01 · The organizational mission is understood and informs cybersecurity risk management →

The designated CII owner must provide an appropriate level of information and cybersecurity awareness and training to all its employees.

ghana-cybersecurity-act::CIID.5.2e · Directive 5.2(e): cybersecurity awareness and training for all employees →

CSF 2.0 outcome: systems, hardware, software, services and data are managed throughout their life cycles. Priority Medium. R1: life cycle management of hardware, software, services and systems should take cybersecurity into account, for example secure configur...

nist-sp-800-61-rev-3::ID.AM-08 · ID.AM-08 Life cycle management accounts for cybersecurity and keeps inventories current →

Questions people ask about cybersecurity

What is Cybersecurity?
The practice of protecting systems, networks, and programs from digital attacks that aim to access, change, or destroy sensitive information.
Why is Cybersecurity important for compliance?
Cybersecurity is a key concept in Information Security. Understanding cybersecurity helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Cybersecurity?
Cybersecurity appears in the requirement text of Australian Energy Sector Cyber Security Framework (AESCSF), ISO/SAE 21434, Saudi NCA ECC, NIST Cybersecurity Framework 2.0, Ghana Cybersecurity Act. Across these standards we have identified 350 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cybersecurity?
Explore our compliance framework pages to see how cybersecurity applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Cybersecurity applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.