GRC As A Foundation For Cyber Security with Beck Norris
Good for a refresher as well as an introduction if you're exploring control frameworks, this session will introduce and reinforce Governance, Risk and Compliance (GRC) as a base foundation for cyber security, no matter the type of business at play.
GRC principles can be operationalized to create an entire Information Security program, and frameworks and guidelines can be tailored to suit specific business needs.
This session will cover the basics of two primary security frameworks NIST and ISO 27001 and provide an high-level overview of the similarities and differences of each, and will point listeners in the direction of how to identify additional supporting frameworks/guidelines depending upon the context of the need in play.
