Question

How does a security framework help an organization achieve information security? Substantiate your answer with relevant examples.

Please use your own words no copy and paste from online

Answer 1

Answer : Basically Information security - Basically Information security is a set of strategies for managing the process , tools and policies necessary to prevent detect , document and counter threats to digital and non-digital information. It is used to prevent from unauthorized access from the person and used to protect the confidential data from those with malicious intentions.

Security Framework are designed to provide a reference for those designing various programmatic security mechanism in order to make sure we benefit from collective success and failures of the broad community. An information security framework , when done properly , will allow any security leader to more intelligently manage their organization cyber risk. The framework consist of number of documents that clearly define the adopted policies , procedure and processes by which your organization abides.

For example -

NIST (National institute of standard technology) Cyber Security Framework :  It provide guidance for critical-infrastructure organizations to better manage and reduce cyber security risks.

This consist of three main components :

1) Framework core provides a set of desired cybersecurity activities and outcome using common language that is easy to understand.

2) The framework implimentations tiers assist organization by providing context on how an organization views cybersecurity risk management.

3) Framework profiles are primarily used to identify and prioritize opportunities fro improving cybersecurity at an organizations.