If you cannot adopt a security framework like ISO27001 or NIST Cyber security or CIS controls, please make sure you have at least the following in place in order to ensure a good security posture: 1. Assess and manage risks 2. Implement a very strong access control solution built on least privilege and need-to-know principles. 3. Implement network security. 4. Protect data. 5. Manage patches. 6. Promote security awareness. 7. Plan to respond to incidents. 8. Monitor and log continuously. 9. Secure endpoints 10. Enhance third-party or supply chain security.
This Cybersecurity Awareness Month, ISC2 Insights is focusing on all aspects of the profession and asked our volunteers to answer a few questions. First up: What is the #1 thing organizations should be doing to ensure they keep a good security posture? Responses revealed common themes around leadership, education and shared responsibility: https://ow.ly/ctXQ50X6hBR
