article thumbnail

Adversarial Risk Management

FS-ISAC

We chase concepts that seem simple, such as "basic" network hygiene, asset management, and patching. But these approaches rely on tenets based on traditional operational and financial risk management. While “close enough” works in asset management for financial inventory, it can quickly prove useless in cybersecurity.

article thumbnail

ISO 27001 Requirements Checklist: Steps and Tips for Implementation

Reciprocity

8 – Asset Management. Asset Management, Annex A.8 This section addresses how organizations define acceptable information protection obligations and identify information assets. Technical vulnerability management is covered in Annex A.12.6, These are the control sets of Annex A : Annex A.5