Cybersecurity control framework

- [Instructor] While controls can be applied … by an enterprise as a customized response to business risks, … in many cases, an external authority … will direct that a predefined set of controls be adopted … as a baseline for security. … An example of government policy is SP 800-53, … Security and Privacy Controls … for Federal Information Systems and Organization, … which federal organizations are required to adopt. … The authority may be an industry body, … such as the Payment Card Industry counsel, … which requires that merchants adhere … to the Payment Card Industry data security standard. … NIST's SP 800-53 is one of two important control frameworks … used in cyber security, the other being ISO 27002. … They are both structured as a set of control categories, … within which exists a number of specific controls. … While the categories and controls … are different for each standard, … they can be mapped against each other. … These two control frameworks are widely referenced … by other security schemes, …