VALIDATING CORE CONCEPTS OF CYBERSECURITY CONTROL USING COMMONLY ACCEPTED STANDARDS. Issue 5 (4th May 2019)

• Record Type: Journal Article
• Authors: Shoemaker, Dan; Kohnke, Anne; Sigler, Ken
• Is Part Of: EDPACS. Volume 59:Issue 5(2019)
• Page Start: 1
• Page End: 12
• Publication Date: 2019-05-04
• Subjects: Electronic data processing -- Auditing -- Periodicals; Computers -- Access control -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1080/07366981.2019.1598634
• Languages: English
• ISSNs: 0736-6981

Abstract

ABSTRACT: Expert models specify repeatable actions that are designed to ensure an organization's resources are utilized for maximum effectiveness. Therefore, a commonly accepted expert model can serve as the basis for defining and enforcing a satisfactory degree of cybersecurity for any organization. In that respect then, expert models serve as a fixed point of reference for instituting specific cybersecurity control. This paper discusses the evolution of cybersecurity expert models, core knowledge elements, and the areas of agreement between the common expert models.