|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/how-to-develop-an-information-security-program/
课程评论：没有评论
课程名称：如何开发信息安全程序 概述：本课程旨在帮助学员开发有效的信息安全程序，内容涵盖信息安全政策、程序及IT标准配置指南。通过一次性购买，学生可获得终身访问在线课程资料，无需安装任何软件。课程提供可下载的基于Microsoft Office的文档模板，学员可以根据自身需求进行编辑。 该信息安全程序（ISP）文档基于NIST网络安全框架（NIST CSF），包括可编辑的Microsoft Word格式的网络安全政策、程序和标准。此ISP覆盖NIST网络安全框架1.1版本的所有控制措施，并将每个控制措施映射到相应的标准及政策声明。ISP帮助学员理解审计中的“什么”和“为什么”，为每个信息安全程序奠定坚实的政策和标准基础。 NIST CSF基础的信息安全程序，针对需要与领先网络安全实践对齐的组织，包含可编辑的Microsoft Word和Excel文档，允许学员按需自定义。 信息安全程序解决了哪些问题？ 1. 合规要求 - 几乎每个行业的组织都需正式记录安全政策和标准。NIST CSF ISP特别为小型组织设计，专注于有效的安全框架以满足合理预期的安全要求。 2. 审计失败 - 安全文档不能像美酒一样随时间而变得更好。过时的文档会导致泄漏，使得组织面临审计失败和系统安全风险。ISP的标准提供对主流安全框架的映射，明确哪些要求有助于保持安全和合规。 3. 供应商要求 - 客户和合作伙伴通常会要求提供安全程序的证据，包括政策和标准，ISP能够提供这方面的证据。 通过本课程，学员将掌握开发与实施信息安全程序所需的知识和技能，为组织的网络安全建设提供支持。
INFORMATION SECURITY PROGRAM DEVELOPMENT COURSEINFORMATION SECURITY POLICY - PROCEDURES - IT STANDARD CONFIGURATION GUIDELINESWith your one-time purchase you gain lifetime access to our online courseware with no software to install. The course comes with downloadable Microsoft Office-based documentation templates that you can edit for your specific needs.The ISP documentation contains NIST Cybersecurity Framework (NIST CSF) based cybersecurity policies, procedures, and standards in an editable Microsoft Word format:The NIST CSF based ISP covers version 1.1 of the NIST Cyber Security FrameworkEach of the NIST controls are mapped to a standard within the ISP and each of those standards are mapped to a policy statement.The ISP covers the "what" and the "why" during an audit as policies and standards for the foundation for every information security program. The NIST Cybersecurity Framework (CSF)-based Information Security Program (ISP) is a set of cybersecurity policies and standards that is tailored for organizations that need to align with leading cybersecurity practices.This version of the Information Security Program (ISP) is based on the NIST Cybersecurity Framework (CSF) framework. It contains cybersecurity policies and standards that align with NIST CSF. You get fully-editable Microsoft Word and Excel documents that you can customize for your specific needs.What Problems Does The ISP Solve?Compliance Requirements - Nearly every organization, regardless of industry, is required to have formally-documented security policies and standards. The NIST CSF ISP is designed for smaller organizations and focuses on leading security frameworks to address reasonably-expected security requirements. The ISP maps to several leading compliance requirements so you can clearly see what is required!Audit Failures - Security documentation does not age gracefully like a fine wine. Outdated documentation leads to gaps that expose organizations to audit failures and system compromises. The ISP's standards provides mapping to leading security frameworks to show you exactly what is required to both stay secure and compliant.Vendor Requirements - It is very common for clients and partners to request evidence of a security program and this includes policies and standards. The ISP provides this evidence!
