“Each conversation helps us explore a different area of security and compliance. Are things working? What gaps do we have to close? And at what remediation cost? The CSF is a great tool for getting everyone onto the same page.”

We utilized COBIT, which is good for achieving compliance with industry regulations, but we wanted to go further, We also wanted to apply a risk-based approach that would map to our capabilities for identifying risks, protecting assets, detecting attacks, responding to breaches, and restoring systems back to normal operations when …