IMPLEMENTING A RISK-BASE CYBER SECURITY FRAMEWORK
Cyber security risk exists throughout an organization through its people, process, and technology. Where is information stored? What are the external threats to that information? How can that information be accessed internally? What are your internal threats? Have you considered the environmental threats to your information? To protect its information, it is imperative for the organization to be able to answer these questions. Then, the organization can begin the process of mitigating its cyber security risk