Cybersecurity Program
What is Cybersecurity Program?
A comprehensive set of policies, procedures, technologies, and personnel dedicated to protecting an organization's digital assets and managing cyber risk.
Terms that appear alongside cybersecurity program
Each of these is named in at least one of the same controls as cybersecurity program. The number is how many controls name both.
- cybersecurity 12 shared controls
- governance 4 shared controls
- information security 3 shared controls
- ciso 2 shared controls
- incident response 2 shared controls
- program governance 2 shared controls
- cisa 2 shared controls
- glba 2 shared controls
Frameworks that govern cybersecurity program
What the standards actually require on cybersecurity program
Requirements naming cybersecurity program across 6 standards, quoted from the control text.
The organisation has a cybersecurity program strategy, in its simplest form a list of objectives with the actions to reach them, even if developed and managed ad hoc.
australian-energy-sector-cyber-security-framework-aescsf::PROGRAM-1a · PROGRAM-1a: A cybersecurity program strategy exists →Maintain a written cybersecurity program based on the Risk Assessment that performs the core functions: identify, protect, detect, respond, recover, and fulfill reporting obligations.
§500.2 · Cybersecurity Program →PROGRAM domain. Establish and maintain an enterprise cybersecurity program with governance, sponsorship, resourcing and periodic management review, and an information-sharing capability.
PROGRAM-1 · Establish and Maintain the Cybersecurity Program →Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization's cybersecurity program and Cyber Supply Chain Risk Management Plan..
nist-cybersecurity-framework-1-1::ID.SC-3 · ID.SC-3: Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization's cybersecurity program and Cyber Supply Chain Risk Management Plan. →The board or its committee reviews and approves the cybersecurity program at least annually.
ffiec-cybersecurity-assessment-tool-cat::D1.G.Ov.E.1 · D1.G.Ov.E.1 Oversight (Evolving 1) →The IAC cybersecurity plan must provide governance processes through which the organisation's exposure on regulatory, legal, environmental and operational fronts feeds into how IAC cyber risk is managed;
api-1164::ID.GV-1 · ID.GV-1 IAC cybersecurity plan governance, performance measurement and review →Questions people ask about cybersecurity program
What is Cybersecurity Program?
Why is Cybersecurity Program important for compliance?
Which compliance frameworks address Cybersecurity Program?
Where can I learn more about Cybersecurity Program?
See how Cybersecurity Program applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.