CYBER SECURITY FRAMEWORK SELECTION: COMPARISION OF NIST AND ISO27001

Abstract

Plans for preventing and mitigating vulnerabilities in computer networks are known as cybersecurity frameworks. With the assistance of the Cybersecurity Framework, organisations are able to reduce their vulnerability to cyber attacks and improve the strength of their defences. The cybersecurity framework has made the decision to take part in trials so that it may improve its ability to handle long-term security frameworks. This gives rise to concerns about cost and time rather than safety at this point in time because of the situation that is occurring. A firm may utilise the similarities that are shared by many cyber security frameworks as a reference to assist it in selecting the framework that is the most suitable for the needs that are unique to the organisation. According to the findings of this study, the risk maturity level, cost, and certification are the three most significant components of CSF implementation for firms.