An Explanation Of What A Cybersecurity Assessment Is

A Cybersecurity Assessment is one in which the current state of a system or series of systems is analyzed and compared against the standards established in the Cybersecurity Framework. Executive Order 13636 (EO 13636) or Presidential Policy Directive-21 (PPD 21), also known as the Framework for Improving Critical Infrastructure Cybersecurity, is a framework of best-practices to help organizations prepare for, prevent, mitigate, and respond to Cybersecurity threats.

The standards set forth in EO 13636 are meant to be upheld on a voluntary basis, they were created and established as a joint effort between the federal government and members of the private sector as a means of proliferating the best and most effective means of achieving reliable network security. It is designed to be cost-effective and based on business needs. It is administered as a gap analysis, where the standards are compared to your existing systems, and all of the places in which the standards are not met are clearly identified and reported back to you for correction.

The Many Benefits Of A Cybersecurity Assessment

If you are unsure about whether or not your company needs a Cybersecurity Assessment, first determine if one is required for your regulatory compliance. Understanding the risks and threats to your assets is always a necessity and is considered best-practice for those seeking an informed and defensible level of information security.