買這商品的人也買了...
-
CCNA 網路概論與試題解析$680$578 -
第二次機器時代：智慧科技如何改變人類的工作、經濟與未來？(The Second Machine Age: Work, Progress, and Prosperity in a Time of Brilliant Technology)$420$357 -
殘酷的 4G：寬頻網路背後的戰爭$350$298 -
Agile Security Development Life Cycle (ASDLC): Integrating Security into the System Development Life Cycle$1,000$950 -
The National Cybersecurity Framework (NCF) for Cybersecurity Professionals: A Roadmap for 21st Century Security Sentinels$1,190$1,131
商品描述
This pocket guide serves as an introduction to the National Institute of Standards and Technology (NIST) and to its Cybersecurity Framework (CSF). This is a US focused product.
Now more than ever, organizations need to have a strong and flexible cybersecurity strategy in place in order to both protect themselves and be able to continue business in the event of a successful attack.
The NIST CSF is a framework for organizations to manage and mitigate cybersecurity risk based on existing standards, guidelines, and practices.
With this pocket guide you can:
- Adapt the CSF for organizations of any size to implement
- Establish an entirely new cybersecurity program, improve an existing one, or simply provide an opportunity to review your cybersecurity practices
- Break down the CSF and understand how other frameworks, such as ISO 27001 and ISO 22301, can integrate into your cybersecurity framework
By implementing the CSF in accordance with their needs, organizations can manage cybersecurity risks in the most cost-effective way possible, maximizing the return on investment in the organization's security. This pocket guide also aims to help you take a structured, sensible, risk-based approach to cybersecurity.
商品描述(中文翻譯)
這本口袋指南介紹了美國國家標準與技術研究所（NIST）及其網路安全框架（CSF）。這是一個以美國為重點的產品。
現在比以往任何時候，組織都需要擁有強大且靈活的網路安全策略，以保護自己並在成功攻擊的情況下繼續業務運作。
**NIST CSF 是一個幫助組織管理和減輕網路安全風險的框架，基於現有的標準、指導方針和實踐。**
使用這本口袋指南，您可以：
- 調整 CSF 以適用於任何規模的組織進行實施
- 建立全新的網路安全計畫、改善現有計畫，或僅僅提供檢視您網路安全實踐的機會
- 拆解 CSF，了解其他框架，如 ISO 27001 和 ISO 22301，如何整合進您的網路安全框架
通過根據自身需求實施 CSF，組織可以以最具成本效益的方式管理網路安全風險，最大化組織安全的投資回報。這本口袋指南還旨在幫助您採取結構化、合理的風險導向方法來應對網路安全。
