FS-ISAC

NOVEMBER 8, 2021

We chase concepts that seem simple, such as "basic" network hygiene, asset management, and patching. But these approaches rely on tenets based on traditional operational and financial risk management. While “close enough” works in asset management for financial inventory, it can quickly prove useless in cybersecurity.

Risk Management 59

Risk Management Management Audit Asset Management 59

Reciprocity

SEPTEMBER 5, 2024

Protecting Assets: Internal controls, especially those related to asset management and security, protect an organization’s assets from theft, misuse, or loss. This not only safeguards shareholder value but also ensures that assets are used effectively for business purposes.

Audit 52

Audit Evaluation Activation Communications 52

Reciprocity

OCTOBER 1, 2022

8 – Asset Management. Asset Management, Annex A.8 This section addresses how organizations define acceptable information protection obligations and identify information assets. Technical vulnerability management is covered in Annex A.12.6, These are the control sets of Annex A : Annex A.5

Gap Analysis 52

Gap Analysis Audit Asset Management Security 52

Reciprocity

OCTOBER 9, 2024

SR – Supply Chain Risk Management : Managing risks from the supply chain to reduce vulnerabilities. Identify: Develop the organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities. You’ve identified and documented the vulnerabilities to your assets.

Cybersecurity 40

Cybersecurity Audit Risk Management Vulnerability 40

Reciprocity

OCTOBER 9, 2024

SR – Supply Chain Risk Management : Managing risks from the supply chain to reduce vulnerabilities. Identify: Develop the organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities. You’ve identified and documented the vulnerabilities to your assets.

Cybersecurity 40

Cybersecurity Audit Risk Management Vulnerability 40