What methodologies or frameworks (like NIST CSF, CMMC, etc.) are you using to assess and track your cybersecurity maturity level?

Security & GRC Strategy & Architecture Management Tools+6 more

43k views22 Upvotes61 Comments

Sort By:

Oldest

Data Scientist in Consumer Goodsa year ago

we use CSF to assess and track cybersecurity maturity level

IT Manager in Manufacturinga year ago

We are held to NIST 800-171, DFARS, ITAR and now CMMC. But our primary focus is NIST 800-171 as that is know, CMMC is not settled currently and is highly based on NST 800-171.

IT Manager in Services (non-Government)a year ago

For a small organisation like us we mainly make use of the standard Azure tools, user training, partner's own tools and a rock solid backup service. Of course, continuous assessment and review of this is also useful.

Please join or sign in to view more content.

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Cloud Solutions Architect in IT Servicesa year ago

We do use NIST framework for assessing security aspect of our Cloud Services. Our preferred cloud provider is AWS and they already have implemented NIST standards for most of their services.

IT Manager in Telecommunicationa year ago

We use a mix of NIST CSF and ISO27001 for compliance, but not to reach any certification yet.

Content you might like

Who will WIN Generative AI Future (GPT/ChatGPT)?

Data & Analytics Disruptive & Emerging Technologies End-User Services & Collaboration+1 more

Open AI (Game Changer: adoption w/ChatGPT)41%

Google (Game Changer: inventor of Transformers, Bard)19%

Microsoft (Game Changer: real time BingGPT+Search plus enterprise enablement)19%

Meta (Game Changer: LLM that can run on single GPU)6%

Amazon (Game Changer: TBD)4%

X.AI / Elon Musk (Game Changer: TBD)3%

Baidu (Chinese tech giant, with GPT version released in March)2%

Someone completely new6%

View Results

46.7k views49 Upvotes15 Comments

We are a large manufacturing company with over 17,000 associates, about half of whom have company-provided cell phones. We average two lost devices per week, which seems low, but executive management is concerned and wants to know if our numbers are typical compared to other companies. My questions are: 1. Do other companies also struggle with lost or stolen devices? 2. What is the average number of lost devices per week? 3. Are there repercussions for associates who lose devices due to carelessness or negligence?

Mobile Device Management (MDM)Mobile Devices Security+2 more

VP of IT in Retail3 days ago

My previous organization implemented a strict one-strike policy for lost or damaged devices. While the first incident was considered an accident, repeat offenders were required to reimburse the company for the lost or damaged ...read more

82 views1 Comment