Please enable JavaScript.

Coggle requires JavaScript to display documents.

CASP+ Policies and frameworks - Coggle Diagram

- - - - i.e. backup role, restore role
      - missile control (2 key)
  - - - reinforce importance of
        their help in securing org valuable resources
      - based on
        intended audiance
    - - teach skill to
        perform job more secure way
        (more procedure)
      - specialized based on
        law, regulation, business
        model
    - - less procedure
        more general
        for all network and all org
- - - - standard
        
        used to implement
        policy
      - baseline
        
        create as ref point
        for compare
      - guideline
        
        recommended
      - procedure
        
        step-by-step instruction
    - - organizational security policy
        
        general direction goal
        framework meet goal
        define role, responsibilities, terms
      - system-specific policy
        
        address need
        specific technology,
        app, network or system
      - issue-specific
        
        address specific security
        issue
    - - regulatory policy
      - advisory policy
      - informative policy
  - - - risk driven
      - 6 layer
        
        operational
        
        component
        
        physical
        
        logical
        
        conceptual
        
        contextual
    - - plan & organize
      - acquire & implement
      - deliver & support
      - monitor & evaluate
    - - 34 practices (for agile & blend Devops & DevSecOps)